CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability. PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078.
- CISA KEV-listed (remediation due 2026-09-14)
- EPSS 85.6% (99.7% percentile)
- CVSS 8.8 high