CVE-2023-27351 - PaperCut NG/MF Improper Authentication Vulnerability

CVE ID:CVE-2023-27351

Project:PaperCut

Product:NG/MF

Date Added:2026-04-20Due Date:2026-05-04

Vulnerability Name

PaperCut NG/MF Improper Authentication Vulnerability

Description

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.

Known To Be Used in Ransomware Campaigns?

Known

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://www.papercut.com/kb/Main/PO-1216-and-PO-1219

https://nvd.nist.gov/vuln/detail/CVE-2023-27351

Vulnerability Name

Description

Known To Be Used in Ransomware Campaigns?

Action

Additional Notes

Related News Articles