medium
CVE-2026-87739
PaperCut MF/NG generates reports for an unauthenticated caller - user permissions are never evaluated (CVSS 6.9)
- Severity
- medium
- Affected product
- PaperCut MF/NG
- Affected versions
- PaperCut MF/NG ≥ 25.0.0, < 25.0.13
- Affected versions
- PaperCut MF/NG ≥ 26.0.0, < 26.0.5
- Fixed in
- PaperCut MF/NG 25.0.13
- Fixed in
- PaperCut MF/NG 26.0.5
- Detection basis
- Appliance fingerprint
- Shipped rule
- PaperCut MF/NG: PaperCut MF/NG generates reports for an unauthenticated caller - user permissions are never evaluated (CVSS 6.9)
- Added to NewScan
- 2026-09-24
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
APPLIANCE FINGERPRINT
NewScan fingerprints the PaperCut MF/NG appliance and reports this CVE when the detected version falls inside the affected range below.
APPLIANCE FINGERPRINT
NewScan fingerprints the PaperCut MF/NG appliance and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.