PaperCut
Security incidents tagged PaperCut. Newest first.
0 PaperCut incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 451
- Longest quiet run: 808 days (May 12–Jul 27)
Show 2 older incidents2 older incidents
July 2025 1
HighPaperCut NG/MF: NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPatched
PaperCut NG/MF Patched
PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. Added to CISA KEV on 2025-07-28.
Open incident →CVE-2023-2533
April 2023 1
CriticalPaperCut MF/NG auth bypass to SYSTEM RCE, used by Cl0p and LockBit (CVE-2023-27350)Patched
PaperCut MF and PaperCut NG Patched
An improper access control bug in PaperCut NG/MF print management let unauthenticated attackers run code as SYSTEM. Fixes had shipped in March 2023, but unpatched servers were exploited from April. Microsoft linked it to Cl0p (Lace Tempest) and LockBit, and the Bl00dy gang hit schools with it.
Open incident →CVE-2023-27350
