P
Vendor security profile5 actively exploited CVEs
PaperCut
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical1
CISA KEV5
Public exploit5
Patch rate%18
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
4
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical1 (9%)
High4 (36%)
Medium3 (27%)
Low1 (9%)
Uncertain2 (18%)
Patch and exploitation view
%18
Verified patch
%45
CISA KEV
%45
Public exploit
2Patch available
0Partial
3Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
3.8
CVE-2026-11744
PaperCut Hive Embedded App for Ricoh: Javascript injection
P
Patch status unknownEPSS %0
6.9
CVE-2026-87739
PaperCut MF/NG: User permissions are not evaluated on report generation
P
Patch status unknownEPSS %0
7.3
CVE-2026-82077
PaperCut NG/MF: Remote Code Execution via Scan2Fax
P
Patch status unknownEPSS %1
7.5
CVE-2026-14780
PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
P
Patch status unknownEPSS %0
9.4
CVE-2026-82078 Actively exploited
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
P
Patch verifiedEPSS %64
8.8
CVE-2026-81578 Actively exploited
PaperCut MF/NG: Authentication Bypass
P
Patch verifiedEPSS %86
6.9
CVE-2026-8794
PaperCut NG/MF: User enumeration via timing attack
P
Patch status unknownEPSS %1
6.9
CVE-2026-8793
PaperCut NG/MF: Insufficient brute-force protection
P
Patch status unknownEPSS %1
-
CVE-2023-2533 Actively exploited
PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
P
WorkaroundEPSS %29
-
CVE-2023-27350 Actively exploited
PaperCut MF/NG Improper Access Control Vulnerability
P
WorkaroundEPSS %100