Vulnerability in Papercut Ng/mf
CVE-2026-8793
PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.
EPSS: 0.004 (32.8th percentile) — read the EPSS interpretation.
Affected products
- Papercut Ng/mf — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2026-8793?
- CVE-2026-8793 is a vulnerability in Papercut Ng/mf, classified under Improper Restriction of Excessive Authentication Attempts. Published 2026-08-03.
- Is CVE-2026-8793 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.