Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-81578— PaperCut MF/NG: Authentication Bypass

Quick assessment

Affected
PaperCut PaperCut MF/NG
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PaperCut MF是PaperCut公司的一套多功能打印机控制软件。 PaperCut MF和PaperCut NG 24.1.10之前版本、25.0.13之前版本和26.0.5之前版本存在授权问题漏洞，该漏洞源于Web管理接口的访问控制不当，在特定条件下，未经身份验证的远程请求针对管理功能时可在访问验证检查完成前触发后端操作，导致未经身份验证的远程攻击者能够修改某些系统配置。

CVSS 8.8 · High KEV EPSS 84.73% · P100

Affected Version Matrix 3

VendorProduct Version RangeStatus
PaperCut PaperCut MF/NG < 24.1.10 affected
25.0.0< 25.0.13 affected
26.0.0< 26.0.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-81578

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PaperCut MF/NG: Authentication Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用基本弱点进行的认证绕过
Source: CVE Program / CVE List V5
Vulnerability Title
PaperCut MF 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PaperCut MF是PaperCut公司的一套多功能打印机控制软件。 PaperCut MF和PaperCut NG 24.1.10之前版本、25.0.13之前版本和26.0.5之前版本存在授权问题漏洞，该漏洞源于Web管理接口的访问控制不当，在特定条件下，未经身份验证的远程请求针对管理功能时可在访问验证检查完成前触发后端操作，导致未经身份验证的远程攻击者能够修改某些系统配置。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
PaperCut PaperCut MF/NG 0 ~ 24.1.10 -

II. Public POCs for CVE-2026-81578

# POC Description Source Link Shenlong Link
1 PaperCut NG and PaperCut MF versions 24.x through 26.x contain an authentication bypass vulnerability in the Apache Tapestry-based web interface. By crafting a complex-direct service request that specifies the public Home page as the render target while invoking the privileged ConfigEditor page's form listeners, an unauthenticated remote attacker can search and modify server configuration options. PaperCut's access control validates the render page but fails to validate the component page, allowing full configuration access without authentication. When chained with CVE-2026-82078, an attacker reconfigures external user lookup to use a malicious JDBC URL whose initialization SQL evaluates arbitrary Groovy code, achieving unauthenticated remote code execution. This vulnerability is actively exploited in the wild. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-81578.yaml POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-81578

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-81578 (1)

IV. Related Vulnerabilities

Same product: PaperCut MF/NG
Same vendor: PaperCut
Same weakness: CWE-305