CVE

CVE-2023-27351

P1⬤ KNOWN RANSOMWARE USE

PaperCut NG/MF Improper Authentication Vulnerability

PaperCut · NG/MF

Date added (CISA)

2026-04-20

Remediation due

2026-05-04

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.

Source: NVD ↗ · CISA KEV Catalog ↗