PaperCut MF/Hive Security Bulletin: CVE-2026-6180, 6181, 7824 Vulnerabilities

PaperCut Security Advisory Summary (May 2026) Vulnerability Overview This advisory covers three security vulnerabilities, all of which have been fixed in the latest versions: 1. CVE-2026-6180 (PaperCut MF) Type: Race Condition / Time-of-Check to Time-of-Use (TOCTOU). Description: When processing swipe card data for specific HP multifunction devices, if network conditions cause packet reordering or loss, the server may incorrectly process data blocks. This can result in truncated card IDs being registered, which are then converted to other users' IDs, leading to unauthorized access. CVSS Score: 4.1 (Medium) 2. CVE-2026-6181 (PaperCut MF) Type: Path Traversal in the Shared Account Synchronization Component. Description: The application allows administrators to configure the source path for account data synchronization. Due to a lack of path validation and sanitization, users with administrative privileges can specify arbitrary local file system paths, resulting in the leakage of sensitive system information. CVSS Score: 4.6 (Medium) 3. CVE-2026-7824 (PaperCut Hive) Type: Log Injection. Description: When "Deep Logging" mode is enabled, the PaperCut Hive Ricoh Embedded Application logs management credentials in plaintext within log files. Attackers can exploit this information to gain administrative privileges. CVSS Score: 5.9 (Medium) Affected Versions PaperCut NG/MF: Users running versions earlier than 25.0.11. PaperCut Hive: Users utilizing Ricoh devices with PaperCut Embedded App versions earlier than 2.2.0. Remediation PaperCut recommends that all customers upgrade to the latest version of their respective products: 1. Upgrade PaperCut NG/MF: Download and install the latest version (25.0.11 or higher) from the PaperCut website. 2. Verify Security Configuration (for CVE-2026-6181): After upgrading, it is recommended to review the configuration key to ensure it is restricted only to authorized directories. 3. Update Embedded Software (for CVE-2026-7824): Ensure that the embedded application on Ricoh devices is updated to version 2.2.0 or higher via the Hive Management Console. Note:** No Proof of Concept (PoC) code or exploit code is included in the advisory.

Goal Reached Thanks to every supporter — we hit 100%!

PaperCut MF/Hive Security Bulletin: CVE-2026-6180, 6181, 7824 Vulnerabilities