Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

PaperCut

Products: PaperCut MF/NG

64.6

Score

2

CVEs

2

Active

0

PoC

2

KEV

#56

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-81578	2026-08-28	8.8v4.0	ACTIVE		Low	None	YES	40.6	PaperCut MF/NG	An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows
CVE-2026-82078	2026-08-28	9.4v4.0	ACTIVE		Low	High	no	24.0	PaperCut MF/NG	An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3