Vulnerabilities

CVSS

6.9 Medium

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Risk score

55.2

Published

2026-08-03

Status

Published

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.

Weaknesses

CWE-307

Coverage 1

vulnerability

Multiples vulnérabilités dans Papercut (03 août 2026)

A series of vulnerabilities have been discovered in PaperCut NG/MF, allowing attackers to compromise data confidentiality and bypass security policies. The vulnerabilities are centered around versions prior to 26.0.3 and…

CERT-FR · Aug 3, 2026 Medium

CVE-2026-8793CVE-2026-8794vulnerabilitypatchsecurity

All articles mentioning it

Advisories and references

• papercut.com/kb/Main/papercut-ng-mf-security-bulletin-3-aug-2026/