PaperCut known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 5 PaperCut vulnerabilities: 3 added in the last 365 days, 2 rated critical (CVSS 9 or higher), and 2 with known ransomware use. The most recent was added Aug 31, 2026.
RSS feed for PaperCut exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-08-31 | CVE-2026-81578 | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 8.8 (v4.0) | 83.7% | 2026-09-14 | Unknown |
| 2026-08-31 | CVE-2026-82078 | PaperCut NG/MF Unsafe Reflection Vulnerability | 9.4 (v4.0) | 60.9% | 2026-09-14 | Unknown |
| 2026-04-20 | CVE-2023-27351 | PaperCut NG/MF Improper Authentication Vulnerability | 8.2 (v3.0) | 78.1% | 2026-05-04 | Known |
| 2025-07-28 | CVE-2023-2533 | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 8.4 (v3.1) | 28.8% | 2025-08-18 | Unknown |
| 2023-04-21 | CVE-2023-27350 | PaperCut MF/NG Improper Access Control Vulnerability | 9.8 (v3.0) | >99.9% | 2023-05-12 | Known |