CVE-2026-82077: An improper limitation of a pathname to a restricted
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
- EPSS 0.7% (53.2% percentile)
- CVSS 7.3 high