CVE-2026-87739

UNKNOWN

Description

An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information.

Timeline

Published:September 24th, 2026 7:16 AM

Last modified:October 13th, 2026 4:17 AM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-639

References & Reports

Advisories, patches, and third-party reports

https://www.papercut.com/kb/Main/security-bulletin-sep-2026/

Source: NIST NVD · Data may lag official sources by up to one minute