Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

PaperCut: actively exploited vulnerabilities

5 vulnerabilities in PaperCut products (NG / MF) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: August 31, 2026.

PaperCut security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one PaperCut category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • NG / MF5 vulnerabilities, Office and PDF

Name used by CISA: PaperCut. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this PaperCut list.

  1. Rank 1

    PaperCut NG / MFCVE-2026-81578

    PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

    CVSS severity 9.8critical

    Added Aug 31, 2026

  2. Rank 2

    PaperCut NG / MFCVE-2026-82078

    PaperCut NG/MF Unsafe Reflection Vulnerability

    CVSS severity 9.1critical

    Added Aug 31, 2026

  3. Rank 3

    PaperCut NG / MFCVE-2023-27351

    PaperCut NG/MF Improper Authentication Vulnerability

    RansomwareCVE from 2023, added in 2026

    CVSS severity 7.5high

    Added Apr 20, 2026

  4. Rank 4

    PaperCut NG / MFCVE-2023-27350

    PaperCut MF/NG Improper Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Apr 21, 2023

  5. Rank 5

    PaperCut NG / MFCVE-2023-2533

    PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 8.8high

    Added Jul 28, 2025

Follow and verify

Get new PaperCut vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.