CVE-2026-6645

Name of the Vulnerable Software and Affected Versions PaperCut Print Deploy Client for Windows (affected versions not specified)

Description An insecure process execution issue exists in the pc-printer-updater.exe component. The application operates with high-level system privileges and performs an internal validation check by invoking a secondary system utility using an unqualified file reference. Since an absolute path is not specified, the application relies on the operating system's default search order to locate the executable. A local attacker capable of modifying directories within the system's search path could place a malicious binary that mimics the expected utility, resulting in the execution of malicious code with SYSTEM privileges and a full compromise of the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.