Skip to content
OpenAdvisories

Vendor

PaperCut

35 known vulnerabilities.

Products

PaperCut NG, PaperCut MF 12 PaperCut NG/MF 10 NG 4 PaperCut NG 2 PaperCut Hive 2 Print Deploy 2 PaperCut MF/NG 2 PaperCut MF 1 PaperCut 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-8794 Public exploit

    PaperCut NG/MF: User enumeration via timing attack

    PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes …

    PaperCut PaperCut NG/MF
  • Medium 6.9
    CVE-2026-8793 Public exploit

    PaperCut NG/MF: Insufficient brute-force protection

    PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering acc…

    PaperCut PaperCut NG/MF
  • Medium 6.5
    CVE-2023-4568 Public exploit

    PaperCut NG Unauthenticated XMLRPC

    PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

    PaperCut PaperCut NG