CVE-2026-14780
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox. A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.
Risk Assessment
A platform administrator can execute arbitrary OS commands on the host, leading to full server compromise. This includes backdoor installation, data theft, and lateral movement.
Recommendation
Update PaperCut NG/MF to a version containing the fix for this vulnerability. Restrict administrative access to the management interface and monitor for unusual device scripts.
Other vulnerabilities in PaperCut NG/MF
See all- CVE-2026-8794Medium
PaperCut NG/MF has an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can enumerate usernames by measuring response times during login attempts.
- CVE-2026-8793Medium
PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.
Original NVD description (English source)
A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox. A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.