CVE-2026-6645— Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
Possible ATT&CK Techniques 3AI
T1055 · Process Injection T1068 · Exploitation for Privilege Escalation T1574.001 · DLLAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PaperCut | Print Deploy | < 1.10.4178 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-6645
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows
Source: NVD (National Vulnerability Database)
Vulnerability Description
An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, which typically operates with high-level system privileges, attempts to perform an internal validation check by invoking a secondary system utility using an unqualified file reference. Because the application does not specify an absolute path to this utility, it relies on the operating system's default search order to locate the executable. Under specific conditions, a local attacker with the ability to modify directories within the system's search path could plant a malicious binary that mimics the expected utility. This could result in the malicious code being executed with SYSTEM privileges, leading to a full compromise of the affected host.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对搜索路径元素未加控制
Source: NVD (National Vulnerability Database)
Vulnerability Title
PaperCut Print Deploy 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PaperCut Print Deploy是PaperCut公司的一款打印机部署管理软件。 PaperCut Print Deploy 1.10.4178之前版本存在权限许可和访问控制问题漏洞，该漏洞源于进程执行不安全，可能导致具有本地访问权限的攻击者提升至SYSTEM权限，完全破解受影响的主机。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PaperCut | Print Deploy | 0 ~ 1.10.4178 | - |
II. Public POCs for CVE-2026-6645
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-6645
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-6645 (1)
IV. Related Vulnerabilities
Same vendor: PaperCut
- CVE-2026-7824
PaperCut Hive (Ricoh): Plain text password in logs - CVE-2026-6418
PaperCut NG/MF: Path Traversal in Shared Account Synchroniza - CVE-2026-6180
PaperCut MF: Card truncation on HP readers - CVE-2026-5115
Session hijacking in PaperCut NG/MF embedded application for - CVE-2026-4794
Multiple cross-site scripting (XSS) vulnerabilities in Paper
Same weakness: CWE-427
- CVE-2026-54672
electron-updater: Uncontrolled search path elements within ` - CVE-2025-13162
Advant Master Online Builder DLL vulnerability - CVE-2026-54232
vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile - CVE-2026-11958
Local privilege escalation in ANSSI’s DFIR-ORC - CVE-2026-12003
CPython >3.11 Insecure Input Validation resulting in privile
V. Comments for CVE-2026-6645
No comments yet