CVE-2026-82077
CVE-2026-82077
7.3
HighPublished:
Last updated:
Source:eb41dac7-0af8-4f84-9f6d-0272772514f4
Awaiting Analysis
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- High
- User Interaction
- None
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- High
- Confidentiality (Subsequent)
- None
- Integrity (Subsequent)
- None
- Availability (Subsequent)
- None
Description
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
References
eb41dac7-0af8-4f84-9f6d-0272772514f4
https://www.papercut.com/kb/Main/security-bulletin-sep-2026/