THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-81578 (CRITICAL 9.8) — An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation

[NVD] CVE-2026-81578 (CRITICAL 9.8) — An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation

mednvdPublished 2026-08-28

CVE-2026-81578 CVSS: 9.8 CRITICAL Published: 2026-08-28T16:18:29.600

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote atta

Indicators of compromise

CVE-2026-81578cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-81578