CVE-2026-8794— PaperCut NG/MF: User enumeration via timing attack
Quick assessment
Affected
PaperCut PaperCut NG/MF
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PaperCut NG/MF是PaperCut公司的一款打印管理软件。 PaperCut NG/MF 26.0.3之前版本存在侧信道信息泄露漏洞，该漏洞源于身份验证组件存在可观察的时间差异，系统仅在提供有效账户时才执行密码哈希比较，可能允许未经验证的远程攻击者通过测量登录尝试期间的响应时间进行用户名枚举。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PaperCut | PaperCut NG/MF | < 26.0.3 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-8794
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PaperCut NG/MF: User enumeration via timing attack
Source: CVE Program / CVE List V5
Vulnerability Description
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过时间差异性导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
PaperCut NG/MF 侧信道信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PaperCut NG/MF是PaperCut公司的一款打印管理软件。 PaperCut NG/MF 26.0.3之前版本存在侧信道信息泄露漏洞，该漏洞源于身份验证组件存在可观察的时间差异，系统仅在提供有效账户时才执行密码哈希比较，可能允许未经验证的远程攻击者通过测量登录尝试期间的响应时间进行用户名枚举。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PaperCut | PaperCut NG/MF | 0 ~ 26.0.3 | - |
|
II. Public POCs for CVE-2026-8794
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8794
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-8794 (1)
IV. Related Vulnerabilities
Same product: PaperCut NG/MF
-
CVE-2026-87739
PaperCut MF/NG: User permissions are not evaluated on report -
CVE-2026-82077
PaperCut NG/MF: Remote Code Execution via Scan2Fax -
CVE-2026-14780
PaperCut NG/MF: Remote Code Execution via Scripting Subsyste -
CVE-2026-8793
PaperCut NG/MF: Insufficient brute-force protection -
CVE-2026-6418
PaperCut NG/MF: Path Traversal in Shared Account Synchroniza
Same vendor: PaperCut
-
CVE-2026-11744
PaperCut Hive Embedded App for Ricoh: Javascript injection -
CVE-2026-87739
PaperCut MF/NG: User permissions are not evaluated on report -
CVE-2026-82077
PaperCut NG/MF: Remote Code Execution via Scan2Fax -
CVE-2026-14780
PaperCut NG/MF: Remote Code Execution via Scripting Subsyste -
CVE-2026-82078
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Con
Same weakness: CWE-208
-
CVE-2026-18036
NTRU leaks private key information by reducing secret values -
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation -
CVE-2026-54875
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RIS -
CVE-2026-54872
Timing Side-Channel in Scalar Multiplication for Non-NIST EC -
CVE-2026-63132
OpenBao's Recovery Mode Vulnerable To Token Leakage via Timi
V. Comments for CVE-2026-8794
No comments yet