70 matches found
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence AI to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and...
PaperCut-Authentication_Bypass_and_RCE
CVE-2023-27350 — Omisión de Autenticación y RCE en PaperCut NG/MF Exploit independiente en Python para la vulnerabilidad crítica de omisión de autenticación y ejecución remota de código en PaperCut NG/MF. CVSS 9.8. Descripción CVE-2023-27350 afecta a PaperCut NG y MF en versiones anteriores a...
PaperCut-CVE-2026-81578-82078
Professional security research tool for PaperCut NG/MF vulnerability assessment & authorized exploitation root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡ powered by yora 19...
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078...
PaperCut NG/MF Unsafe Reflection Vulnerability
PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained...
Exploit for CVE-2026-81578
Professional security research tool for PaperCut NG/MF vulne...
PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of...
CVE-2026-8794
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a...
CVE-2026-8793
PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanis...
CVE-2026-5115 Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices
The PaperCut NG/MF specifically, the embedded application for Konica Minolta devices is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the...
CVE-2026-4794
Multiple cross-site scripting XSS vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the...
CVE-2026-4794
PaperCut NG/MF prior to version 25.0.10 is affected by multiple XSS vulnerabilities in various UI fields that can be exploited by authenticated administrators to inject scripts or HTML, potentially compromising other admins’ sessions or performing actions within the admin context. A fix is availa...
CVE-2026-4794 Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF
Multiple cross-site scripting XSS vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the...
PaperCut NG/MF 安全漏洞
PaperCut NG/MF is a printing management system developed by PaperCut Corporation. Versions of PaperCut NG/MF prior to 25.0.10 contained security vulnerabilities. These vulnerabilities stemmed from cross-site scripting vulnerabilities in multiple UI fields, which could allow for the injection of...
PaperCut NG/MF 安全漏洞
PaperCut NG/MF is a printing management system developed by PaperCut Corporation. There is a security vulnerability in PaperCut NG/MF. This vulnerability stems from an insecure communication channel between the embedded application and the server, which could lead to data leaks. These leaked data...
PT-2026-29169
Multiple cross-site scripting XSS vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the...
EUVD-2024-49151
Malicious code in bioql PyPI...