PaperCut NG/MF patches confidentiality flaws
Two vulnerabilities in PaperCut NG/MF before 26.0.3 allow attackers to breach data confidentiality and bypass security policy.
CERT-FR issued an advisory covering two vulnerabilities in PaperCut NG/MF print management software affecting versions prior to 26.0.3. The flaws, tracked as CVE-2026-8793 and CVE-2026-8794, could allow an attacker to compromise data confidentiality and bypass the application's security policy enforcement.
PaperCut has released a security bulletin along with patches addressing these issues. No evidence of active exploitation is mentioned in the advisory; organizations running affected versions are advised to consult the vendor bulletin and apply the available fixes.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0959
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free