Read the docs
TI-2014-02140 Aliases CVE-2014-2658GHSA-6cjh-3rqh-x93f

Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker…

Priority LOW 26Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in Papercut MF and NG before 14.1 (Build 26983) allows attacker to cause a denial of service via unknown vectors.

Why it matters now

EPSS 0.01344 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*up to 14.1VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:12.0:*:*:*:*:*:*:*12.0VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:12.1:*:*:*:*:*:*:*12.1VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:12.2:*:*:*:*:*:*:*12.2VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:12.3:*:*:*:*:*:*:*12.3VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:12.4:*:*:*:*:*:*:*12.4VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:12.5:*:*:*:*:*:*:*12.5VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:13.0:*:*:*:*:*:*:*13.0VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:13.1:*:*:*:*:*:*:*13.1VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:13.2:*:*:*:*:*:*:*13.2VulnerablePaperCut
  • cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* Versions up to 14.1 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:12.3:*:*:*:*:*:*:* Versions 12.3 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:12.4:*:*:*:*:*:*:* Versions 12.4 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:12.5:*:*:*:*:*:*:* Versions 12.5 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:13.0:*:*:*:*:*:*:* Versions 13.0 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:13.1:*:*:*:*:*:*:* Versions 13.1 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·PaperCut
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:papercut:papercut_mf:13.3:*:*:*:*:*:*:*13.3VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:13.4:*:*:*:*:*:*:*13.4VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:13.5:*:*:*:*:*:*:*13.5VulnerablePaperCut
cpe:2.3:a:papercut:papercut_mf:14.0:*:*:*:*:*:*:*14.0VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*up to 14.1VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:12.0:*:*:*:*:*:*:*12.0VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:12.1:*:*:*:*:*:*:*12.1VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:12.2:*:*:*:*:*:*:*12.2VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:12.3:*:*:*:*:*:*:*12.3VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:12.4:*:*:*:*:*:*:*12.4VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:12.5:*:*:*:*:*:*:*12.5VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:13.0:*:*:*:*:*:*:*13.0VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:13.1:*:*:*:*:*:*:*13.1VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:13.2:*:*:*:*:*:*:*13.2VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:13.3:*:*:*:*:*:*:*13.3VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:13.4:*:*:*:*:*:*:*13.4VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:13.5:*:*:*:*:*:*:*13.5VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:14.0:*:*:*:*:*:*:*14.0VulnerablePaperCut
  • cpe:2.3:a:papercut:papercut_mf:13.3:*:*:*:*:*:*:* Versions 13.3 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:13.4:*:*:*:*:*:*:* Versions 13.4 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:13.5:*:*:*:*:*:*:* Versions 13.5 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_mf:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* Versions up to 14.1 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:12.3:*:*:*:*:*:*:* Versions 12.3 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:12.4:*:*:*:*:*:*:* Versions 12.4 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:12.5:*:*:*:*:*:*:* Versions 12.5 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:13.0:*:*:*:*:*:*:* Versions 13.0 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:13.1:*:*:*:*:*:*:* Versions 13.1 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:13.3:*:*:*:*:*:*:* Versions 13.3 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:13.4:*:*:*:*:*:*:* Versions 13.4 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:13.5:*:*:*:*:*:*:* Versions 13.5 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·PaperCut

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-2658
  2. 2026-10-03 Alias added: GHSA-6cjh-3rqh-x93f

References

Advisory 2

  • TI-2026-56642 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector KEVCVSS 4.0CRITICAL 9.4
  • TI-2023-12085 Improper access control in PaperCut NG KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-02373 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF KEVCVSS 3.1HIGH 8.8
  • TI-2026-56284 PaperCut MF/NG: Authentication Bypass KEVCVSS 4.0HIGH 8.8
  • TI-2023-12086 Improper authentication in PaperCut NG KEVCVSS 3.1HIGH 7.5
  • TI-2023-20314 PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling… CVSS 3.1CRITICAL 9.8
See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences