CVE-2026-81578 - An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under sp
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.
CRITICAL
CISA KEV
ACTIVELY EXPLOITED
Severity & confidence
Source severityinformational
Platform severitycritical
Confidenceconfirmed
Exploitationactively exploited
CVSS-
Affected
ProductsNG/MF
Reporting sources (3)
NIST NVD - National Vulnerability Database
CISA - Known Exploited Vulnerabilities
CISA - Cybersecurity Advisories
🎯 Why should I care?
- On the CISA Known Exploited Vulnerabilities list.
- Credible sources report active exploitation in the wild.
Timeline & provenance
Published2026-08-28T16:18:29
Last updated2026-10-21T04:58:06
Ingested2026-08-30T17:33:45
FreshnessNEAR-REAL-TIME
Threat typevulnerability
Recommended action
No recommended action published with this item - review the original source.
Next steps
- Identify affected systems in your environment.
- Apply the vendor patch or mitigation guidance.
- Review logs for indicators described in the advisory.
- Follow the affected vendor/product to track updates.
Confidence explanation
This object is reported by 3 independent sources.
Source type: standards · Original: NIST NVD - National Vulnerability Database
