Exploited vulnerabilities
PaperCut
5 PaperCut vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue5
Last 12 months3
In ransomware campaigns2
Last addition31 August 2026
The vulnerabilities5
- 31 August 2026CVE-2026-82078NG/MFPaperCut NG/MF Unsafe Reflection Vulnerability
- 31 August 2026CVE-2026-81578NG/MFPaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- 20 April 2026CVE-2023-27351NG/MFPaperCut NG/MF Improper Authentication VulnerabilityRansomware
- 28 July 2025CVE-2023-2533NG/MFPaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
- 21 April 2023CVE-2023-27350MF/NGPaperCut MF/NG Improper Access Control VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, PaperCut included.