CVE-2026-82077

Name of the Vulnerable Software and Affected Versions PaperCut NG (affected versions not specified) PaperCut MF (affected versions not specified)

Description A path traversal issue exists in the Scan-to-Fax component, where improper limitation of a pathname to a restricted directory allows an authenticated administrator to execute arbitrary commands on the underlying host by using crafted fax provider settings. Path traversal is a flaw that allows an attacker to access files or directories outside the intended folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.