CVE-2026-82077 — PaperCut NG/MF: Remote Code Execution via Scan2Fax
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated…
Published: 2026-09-24 · CVSS: 7.3 · CVSS 4.0
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7