—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in PaperCut NG/MF Application Server

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Software Affected

All PaperCut NG versions prior to Emergency Patch Release 3

All PaperCut MF versions prior to Emergency Patch Release 3

PaperCut NG/MF versions 23 and earlier are advised to be upgraded to the latest version.

Overview

Multiple vulnerabilities have been reported in PaperCut NG/MF Application Server, which could allow an unauthenticated remote attacker to bypass authentication, modify system configurations, execute arbitrary Java bytecode, and compromise affected systems.

Target Audience:

All organizations and administrators using affected PaperCut NG/MF Application Server deployments.

Risk Assessment:

Critical risk of authentication bypass, arbitrary code execution, unauthorized modification of system configurations, and compromise of affected systems.

Impact Assessment:

Successful exploitation of these vulnerabilities could result in authentication bypass, arbitrary code execution, unauthorized modification of system configurations, unauthorized access, and compromise of the confidentiality, integrity, and availability of affected systems.

Description

PaperCut NG and PaperCut MF are print management solutions developed by PaperCut Software, providing print management, document workflow, and print security capabilities for organizations.

Multiple vulnerabilities exist in PaperCut NG/MF Application Server due to improper access control and unsafe dynamic class loading.

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, modify system configurations, execute arbitrary Java bytecode, or compromise affected systems.

Solution

Apply appropriate security updates and mitigations as recommended by the vendor.

https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/

Vendor Information

PaperCut Software

https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/

References

 

https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/

https://www.bleepingcomputer.com/news/security/papercut-releases-second-emergency-patch-for-exploited-flaws/

CVE Name

CVE-2026-81578

CVE-2026-82078

– —

Thanks and Regards,

CERT-In

Incident Response Help Desk

e-mail: incident@cert-in.org.in

Phone: +91-11-22902657

Toll Free Number: 1800-11-4949

Toll Free Fax : 1800-11-6969

Web: http://www.cert-in.org.in

PGP Fingerprint: A768 083E 4475 5725 B81A A379 2156 C0C0 B620 D0B4

PGP Key information:

https://www.cert-in.org.in/s2cMainServlet?pageid=CONTACTUS

Postal address:

Indian Computer Emergency Response Team (CERT-In)

Ministry of Electronics and Information Technology

Government of India

Electronics Niketan

6, C.G.O. Complex

New Delhi-110 003

—–BEGIN PGP SIGNATURE—–

iQIzBAEBCAAdFiEE6r4Iam/Ey0c/KakL3jCgcSdcys8FAmqirQMACgkQ3jCgcSdc

ys8v7BAApQlfQE51qxHmFRVsRlZPcSSHQ4i6p5KmTEW1yl3ncYlXkAvQvh/o9xQx

wxq5GBtHj0u5+WSLDDvUEW85hdoYX2Gxx81Y2LYzSdwC2wIxxQRKlO7ir7jQwvXV

dyz9pxrWRbfQo4mfeqv/a4BSzuiHg0bHF1zjNjo2gJ1pe8mYUTgpDXtHWKJa/ooU

RQjAgMRiStiOVKlzE0vrg2r/ZVv7IiKMz3zxnwIgXz1mq+CYCeT4I3jpJfXlIkWB

e1x6H1jzho6yVcXaK3FKYWn2q2slMJLsPQpKII+KzlGli/7DBvj6zF07Xbe1JXNE

hi+BO5m4xSwDve342aoX8pxApDxIQdPtMM2zRyGMGjwFtxVBrxTXwi9SNbQKaST1

/2Gjj2Vr/KNN1RRFnpe2+BaDAJFjz1id7nJgawreoervDI7Xu1SGx9iIwOOctwxM

qT8uQgE3TDUkptgF970UPSu9qIbuXsuGDthv3cb9+jWQii8gumOHwjwmOa9eLgIm

BuTcqkN5zspQ7dWF1QJVpCfQGl0Ylom1SGKmagovMnDfa0kCq3emXJNVJE/MJvIU

oEvzU0J7HyMJsyo4R4UC4CWW7R/Ny0L/A8wgKUimSRF6qlYuUVM8dUGVKjjrzWY2

apZSIhnhaf34haEj6lZRuLOKTAe3cjaQOaqbFO5GP6LQfKfaZ20=

=bV57

—–END PGP SIGNATURE—–