Vulnerability details
CVE-2026-82078
Actively exploited
PaperCut MF/NG
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
CVSS 4.0
9.4Critical
Official description
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.4Critical | 4.0 | CVEProject cvelistV5 (CNA) (PaperCut) | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| PaperCut | PaperCut MF/NG | v < 24.1.10 | CVEProject cvelistV5 (CNA) |
| PaperCut | PaperCut MF/NG | 25.0.0 ≤ v < 25.0.13 | CVEProject cvelistV5 (CNA) |
| PaperCut | PaperCut MF/NG | 26.0.0 ≤ v < 26.0.5 | CVEProject cvelistV5 (CNA) |
References and advisories
3
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-28
- Last updated
- 2026-09-14
- State
- Published
- Assigner (CNA)
- PaperCut
- Kolun priority
- 89 · Critical
CISA KEV catalog
- Date added
- 2026-08-31
- Due date
- 2026-09-14
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
63.04%
Probability of exploitation in 30 days
99.2%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-470Use of Externally-Controlled input to select classes or code ('unsafe reflection')