Exploit for CVE-2026-81578

cve · 2026-08-28

Description

Authentication bypass in PaperCut MF/NG web interface allows unauthenticated config changes.

Affected software

Papercut Papercut Mf< 24.1.9, 25.0.12, 26.0.4

Papercut Papercut Ng< 24.1.9, 25.0.12, 26.0.4

CVSS 9.8 for CVE-2026-81578

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

EPSS Score

0.4%higher than 32.4% of all CVEs

Updated 2026-09-01

CVE Information

References

https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81578

https://github.com/rapid7/metasploit-framework/pull/21842

Exploit Details

Modified:2026-09-01 04:18

Last Seen:2026-09-01 05:15

Reporter:PaperCut

Tags

PaperCut MF/NGAuthentication bypassWeb management interfaceAccess controlUnauthenticated

Other exploits for CVE-2026-81578

PaperCut-CVE-2026-81578-82078

2026-08-29 KitPloitKITPLOIT

Exploit for CVE-2026-81578

2026-08-29 virologi-infoGITHUB

Exploit for CVE-2026-81578

2026-08-29 yora1928GITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-81578
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the  completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.