High (7.5) in papercut. EPSS 79% chance of exploitation in the next 30 days.
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.
Severity
CVSS 3.1
7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
79% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)