Description
PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| PaperCut MF/NG | PaperCut / PaperCut MF/NG | >= 0, < 24.1.10 | affected |
| PaperCut MF/NG | PaperCut / PaperCut MF/NG | >= 25.0.0, < 25.0.13 | affected |
| PaperCut MF/NG | PaperCut / PaperCut MF/NG | >= 26.0.0, < 26.0.5 | affected |