CVE-2026-81578Critical· 9.8▾ Hadal⚠ Exploited in the wildPoC availableAn improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions pri…
▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)
impact 53.9 · likelihood 16.7 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 3 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Sep 14, 2026
Last analysed / modified upstream
1.6%
1.6% → 86%
2 GitHub repos · Metasploit ×1 · Nuclei ×1 (last check)
Added to the CISA catalog on Aug 31, 2026. Federal remediation due Sep 14, 2026. View catalog ↗
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.
papercut_mf < 24.1.9papercut_mf >= 25.0.2, < 25.0.12papercut_mf >= 26.0.2, < 26.0.4papercut_ng < 24.1.9papercut_ng >= 25.0.2, < 25.0.12papercut_ng >= 26.0.2, < 26.0.4Upgrade past the affected range:
papercut_mf 26.0.4papercut_ng 26.0.4Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-27351High· 7.5This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914)
CVE-2026-82078Critical· 9.4PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
CVE-2025-41450High· 8.2Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
CVE-2026-111283Critical· 9.0BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration
CVE-2023-27535Medium· 5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers
CVE-2023-27536Medium· 5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_D…