PaperCut
5 PaperCut flaws are on CISA's list of vulnerabilities attackers have used, 3 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Aug 31, 2026.
5on CISA's list, all time
3added in 2026
2in the last 90 days
2used by ransomware
3zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| NG/MF | 4 | Aug 31, 2026 |
| MF/NG | 1 | Apr 21, 2023 |
Latest PaperCut flaws
- NG/MFPaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- NG/MFPaperCut NG/MF Unsafe Reflection Vulnerability
- NG/MFPaperCut NG/MF Improper Authentication Vulnerability
- NG/MFPaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
- MF/NGPaperCut MF/NG Improper Access Control Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.