criticalKEV
CVE-2026-81578
PaperCut MF/NG unauthenticated management-interface access control bypass chained to code execution (CISA KEV)
- Severity
- critical
- Affected product
- PaperCut MF/NG
- Affected versions
- PaperCut MF/NG ≥ 24.0.0, < 24.1.9
- Affected versions
- PaperCut MF/NG ≥ 25.0.0, < 25.0.12
- Affected versions
- PaperCut MF/NG ≥ 26.0.0, < 26.0.4
- Fixed in
- PaperCut MF/NG 24.1.9.76515 (MF) / 24.1.9.76516 (NG)
- Fixed in
- PaperCut MF/NG 25.0.12.76509 (MF) / 25.0.12.76510 (NG)
- Fixed in
- PaperCut MF/NG 26.0.4.76507 (MF) / 26.0.4.76508 (NG)
- Detection basis
- Appliance fingerprint
- Shipped rule
- PaperCut MF/NG: PaperCut MF/NG unauthenticated management-interface access control bypass chained to code execution (CISA KEV)
- CISA KEV
- Listed as a known exploited vulnerability
- Added to NewScan
- 2026-09-01
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
APPLIANCE FINGERPRINT
NewScan fingerprints the PaperCut MF/NG appliance and reports this CVE when the detected version falls inside the affected range below.
APPLIANCE FINGERPRINT
NewScan fingerprints the PaperCut MF/NG appliance and reports this CVE when the detected version falls inside the affected range below.
APPLIANCE FINGERPRINT
NewScan fingerprints the PaperCut MF/NG appliance and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.