PaperCut
PaperCut Security Releases - September 2026
papercut-2026-09 Sep 1, 2026 Source: Vendor
PaperCut security advisories for September 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-82077
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-82077
BR2026-0000-027967
PaperCut NG/MF
unclaimed
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to ex...
Credited as Piotr Bazydlo (@chudyPB) of watchTowr
CVE-2026-14780
BR2026-0000-027970
PaperCut NG/MF
unclaimed
A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticate...
Credited as Mark Fox