PN
Product
Papercut NG/MF
by PaperCut · last CVE Sep 24, 2026
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 0
Watch

Add Papercut NG/MF to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2533
In wildKEV
8.8
29%
Jun 20
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
Affected: 22.0.10 before 2.1.1
CVE-2026-6180
8.1
0%
May 5
PaperCut MF: Card truncation on HP readers
Affected: before 24.1.9; before 25.0.10
CVE-2026-14780
7.5
0%
Sep 24
PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
Affected: before 24.1.11; 25.0.0 before 25.0.12; 26.0.0 before 26.0.2
CVE-2026-5115
7.5
0%
Mar 31
Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices
Affected: before 25.0.5; before 25.0.9 (KM certified)
CVE-2026-82077
7.3
1%
Sep 24
PaperCut NG/MF: Remote Code Execution via Scan2Fax
Affected: before 24.1.10; 25.0.0 before 25.0.13; 26.0.0 before 26.0.5
Showing 5