CVE-2026-81578: PaperCut NG/MF
PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078.
- Vendor
- PaperCut
- Product
- NG/MF
- Vulnerability
- PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- Date added
- Aug 31, 2026
- CISA due date (U.S. federal agencies)
- Sep 14, 2026
- Known ransomware campaign use
- Unknown
- Weakness (CWE)
- CWE-306
References
This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.
Last updated: · Catalog version 2026.10.02