CVE-2026-5115Disclosure(papercut / papercut_mf)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch papercut papercut_mf systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the communication channel between the embedded application and the server was insecure, which could leak data including sensitive information that may be used to mount an attack on the device. Such an attack could potentially be used to steal data or to perform a phishing attack on the end user.

papercut CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.papercut.com/kb/Main/papercut-ng-mf-security-bulletin-march-2026/

Weakness type (CWE)

CWE-319

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

papercut_mf
papercut_mf_konica_minolta

Threat summary

Patch or workaround signal is available
5 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 1d ago at 4 mentions (2026-03-31); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

papercut

Products

papercut_mfpapercut_mf_konica_minolta

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-31	4	Disclosure2General2
2026-04-07	1	Disclosure1

Full discourse5 posts

インフォセキュアソリューションズ株式会社@InSecSol0417184d
Disclosure
🖨️【PaperCutにも脆弱性】 PaperCut NG/MF に、管理画面のXSSや一部Konica Minolta連携でのセッション乗っ取りにつながる脆弱性（CVE-2026-4794、CVE-2026-5115）が公表されています。利用中の環境は25.0.10以降か確認し、早めの更新を進めましょう。 #企業公式相互フォロー
Post summary
PaperCut NG/MF has disclosed XSS and session hijack vulnerabilities (CVE‑2026‑4794, CVE‑2026‑5115); users should verify they are on version 25.0.10 or newer and update promptly.
110140170
536 followersView on X
Autumn Good@autumn_good_35191d
General
CVE-2026-4794 CVE-2026-5115 PaperCut NG/MF Security Bulletin (March 2026) | PaperCut https://www.papercut.com/kb/Main/papercut-ng-mf-security-bulletin-march-2026/
Post summary
The text lists two CVEs and references a PaperCut security bulletin, but provides no details on PoC, exploitation, or patch information.
00000275
6.7K followersView on X
CVEarity@CVEarity191d
General
⚡ New CVE Alert: CVE-2026-5115 📊 Severity: 3.6 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5115 #CVE-2026-5115 #CVE #Low #CyberSecurity #InfoSec https://t.co/pRgKGhKlmK
Post summary
The tweet simply announces CVE‑2026‑5115 with a low severity score, providing no technical, exploit, or patch details.
0000021
123 followersView on X
CVE@CVEnew191d
Disclosure
CVE-2026-5115 The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a … https://www.cve.org/CVERecord?id=CVE-2026-5115
Post summary
The post reports that PaperCut NG/MF’s embedded application for Konica Minolta devices suffers from a session hijacking vulnerability, referencing the official CVE record.
00000100
56.9K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash191d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5115 - Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices Intel Report: https://ift.tt/eUcmWKG
Post summary
The tweet announces CVE-2026‑5115, a session hijacking flaw in PaperCut NG/MF on Konica Minolta devices, but offers no proof of exploitation, PoC, or patch details.
0000030
281 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	papercut	papercut_mf	-	-	-
App	papercut	papercut_mf_konica_minolta	-	-	-

Explore more

Back to dashboard papercut CVEs papercut_mf vulnerabilities

What researchers are saying

CVE-2026-5115

インフォセキュアソリューションズ株式会社@InSecSol0417Disclosure

PaperCut NG/MF has disclosed XSS and session hijack vulnerabilities (CVE‑2026‑4794, CVE‑2026‑5115); users should verify they are on version 25.0.10 or newer and update promptly.

Autumn Good@autumn_good_35General

The text lists two CVEs and references a PaperCut security bulletin, but provides no details on PoC, exploitation, or patch information.

CVEarity@CVEarityGeneral

The tweet simply announces CVE‑2026‑5115 with a low severity score, providing no technical, exploit, or patch details.

CVE@CVEnewDisclosure

The post reports that PaperCut NG/MF’s embedded application for Konica Minolta devices suffers from a session hijacking vulnerability, referencing the official CVE record.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The tweet announces CVE-2026‑5115, a session hijacking flaw in PaperCut NG/MF on Konica Minolta devices, but offers no proof of exploitation, PoC, or patch details.