PaperCut NG/MF — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in PaperCut NG/MF, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-87739	PaperCut MF/NG: User permissions are not evaluated on report generation CWE-639	6.9	Medium	2026-09-24
CVE-2026-82077	PaperCut NG/MF: Remote Code Execution via Scan2Fax CWE-22	7.3	High	2026-09-24
CVE-2026-14780	PaperCut NG/MF: Remote Code Execution via Scripting Subsystem CWE-94	7.5	High	2026-09-24
CVE-2026-8794	PaperCut NG/MF: User enumeration via timing attack CWE-208	6.9	Medium	2026-08-03
CVE-2026-8793	PaperCut NG/MF: Insufficient brute-force protection CWE-307	6.9	Medium	2026-08-03
CVE-2026-6418	PaperCut NG/MF: Path Traversal in Shared Account Synchronization CWE-36	2.7	-	2026-05-05
CVE-2026-6180	PaperCut MF: Card truncation on HP readers CWE-367	3.7	-	2026-05-05
CVE-2026-5115	Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices CWE-319	7.1^AI	High ^AI	2026-03-31
CVE-2026-4794	Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF CWE-79	4.8^AI	Medium ^AI	2026-03-31
CVE-2023-2533	PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF CWE-352	8.4	High	2023-06-20

All 10 known CVE vulnerabilities affecting PaperCut NG/MF with full Chinese analysis, references, and POCs where available.