CVE-2026-8794— PaperCut NG/MF: User enumeration via timing attack
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PaperCut | PaperCut NG/MF | < 26.0.3 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8794
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PaperCut NG/MF: User enumeration via timing attack
Source: CVE Program / CVE List V5
Vulnerability Description
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过时间差异性导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
PaperCut NG/MF 侧信道信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PaperCut NG/MF是PaperCut公司的一款打印管理软件。 PaperCut NG/MF 26.0.3之前版本存在侧信道信息泄露漏洞，该漏洞源于身份验证组件存在可观察的时间差异，系统仅在提供有效账户时才执行密码哈希比较，可能允许未经验证的远程攻击者通过测量登录尝试期间的响应时间进行用户名枚举。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PaperCut | PaperCut NG/MF | 0 ~ 26.0.3 | - |
II. Public POCs for CVE-2026-8794
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8794
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-8794 (1)
IV. Related Vulnerabilities
Same product: PaperCut NG/MF
- CVE-2026-8793
PaperCut NG/MF: Insufficient brute-force protection - CVE-2026-6418
PaperCut NG/MF: Path Traversal in Shared Account Synchroniza - CVE-2026-6180
PaperCut MF: Card truncation on HP readers - CVE-2026-5115
Session hijacking in PaperCut NG/MF embedded application for - CVE-2026-4794
Multiple cross-site scripting (XSS) vulnerabilities in Paper
Same vendor: PaperCut
- CVE-2026-8793
PaperCut NG/MF: Insufficient brute-force protection - CVE-2026-6645
Insecure Search Path Vulnerability in PaperCut Print Deploy - CVE-2026-7824
PaperCut Hive (Ricoh): Plain text password in logs - CVE-2026-6418
PaperCut NG/MF: Path Traversal in Shared Account Synchroniza - CVE-2026-6180
PaperCut MF: Card truncation on HP readers
Same weakness: CWE-208
- CVE-2026-16458
Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto - CVE-2026-16459
Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon - CVE-2026-43606
AMD Vitis 侧信道信息泄露漏洞 - CVE-2025-49506
Apache Portable Runtime Utility: apr_password_validate() vul - CVE-2026-16731
Authentication and authorization bypass via cryptographic ti
V. Comments for CVE-2026-8794
No comments yet