Question 1

What is CVE-2026-81578 — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability?

Accepted Answer

PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078.

Question 2

What is the authoritative source for CVE-2026-81578?

Accepted Answer

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability (CVE-2026-81578) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	84.59% probability of exploitation · percentile 99.7% · 2026-10-05T12:00:23Z
Last modified	2026-09-14

CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

Description

Scoring

CISA KEV entry