Vulnerabilities

TI-2026-59893 CVE-2026-87739 · GHSA-hcgg-7hh4-grvw

PaperCut MF/NG: User permissions are not evaluated on report generation

LOW 37

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00429 Published 2026-09-24 Fixed in 24.1.10, 25.0.13 +1 CWE-639

TI-2026-56641 CVE-2026-82077 · GHSA-6392-7mrr-8qfw

PaperCut NG/MF: Remote Code Execution via Scan2Fax

LOW 36

An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary command…

CVSS 4.0HIGH 7.3 Network High privileges No interaction EPSS 0.0084 Published 2026-09-24 Fixed in 24.1.10, 25.0.13 +1 CWE-22

Vulnerabilities

Filters

PaperCut MF/NG: User permissions are not evaluated on report generation

PaperCut NG/MF: Remote Code Execution via Scan2Fax