CVE-2023-27351

PaperCut NG/MF Improper Authentication Vulnerability

7.5

CVSS

77.4%

EPSS (exploit prob.)

99.5%

EPSS percentile

Yes

Actively exploited

Yes

Ransomware use

2026-04-20

Added

Summary

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.

Affected software

Vendor: PaperCut · Product: NG/MF

Weakness types (CWE):

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Related vulnerabilities in PaperCut

CVE	Name	EPSS	Exploited
CVE-2023-27350	PaperCut MF/NG Improper Access Control Vulnerability	100.0%	Yes
CVE-2023-2533	PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability	29.2%	Yes

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.