CVE-2026-8793 in PaperCutinfo

Summary

by MITRE • 08/03/2026

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsible

PaperCut

Reservation

05/18/2026

Disclosure

08/03/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

Want to know what is going to be exploited?

We predict KEV entries!