PM
IT Management
PaperCut MF/NG
On CISA KEVExploited in the wildRansomware-linked
33
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 12Medium 10Low 1
Watch
Add PaperCut MF/NG to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2533 In wildKEV | 8.8 | Jun 20 | PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF Affected: before 20.1.8; 21.0.0 before 21.2.12; 22.0.0 before 22.1.1 |
| CVE-2023-27351 RansomwareIn wildKEV | 7.5 | Apr 20 | PaperCut NG/MF Improper Authentication Vulnerability Affected: 22.0.5 (Build 63914) |
| CVE-2026-6180 | 8.1 | May 5 | PaperCut MF: Card truncation on HP readers Affected: before 24.1.9; 25.0.2 before 25.0.10 |
| CVE-2024-8404 | 7.8 | Sep 26 | Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder Affected: before 23.0.9 |
| CVE-2024-4712 | 7.8 | May 14 | An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the image-handler… Affected: before 23.0.9 |
| CVE-2024-3037 | 7.8 | May 14 | An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled Affected: before 23.0.9 |
| CVE-2026-5115 | 7.5 | Mar 31 | Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices Affected: before 25.0.5 |
| CVE-2023-3486 | 7.5 | Jul 25 | An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s… Affected: before 22.1.3 |
| CVE-2023-39470 | 7.2 | Nov 22 | PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability Affected: 22.0.10 65996 |
| CVE-2023-39469 | 7.2 | May 3 | PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability Affected: before 22.1.1 |
| CVE-2024-1882 | 7.2 | Mar 14 | This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut… Affected: before 20.1.10; 21.0.0 before 21.2.14; 22.0.0 before 22.1.5; 23.0.1 before 23.0.7 |
| CVE-2024-1654 | 7.2 | Mar 14 | This vulnerability potentially allows unauthorized write operations which may lead to remote code execution Affected: before 20.1.10; 21.0.0 before 21.2.14; 22.0.0 before 22.1.5; 23.0.1 before 23.0.7 |
Showing 12