CVE-2026-81578

Name of the Vulnerable Software and Affected Versions PaperCut MF (affected versions not specified) PaperCut NG (affected versions not specified)

Description An improper access control issue exists in the web management interface. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions before access validation checks are completed. This allows an unauthenticated remote attacker to read and modify certain system configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.