CVE-2026-82077

🚨 SECURITY BULLETIN — PaperCut has disclosed four vulnerabilities affecting PaperCut NG/MF and its Ricoh embedded application. CyberSignal Priority: 🟠 HIGH The vulnerabilities are: CVE-2026-14780 Authenticated RCE through the scripting subsystem. CVE-2026-82077 Authenticated administrator RCE through Scan2Fax. CVE-2026-87739 Unauthenticated authorization bypass allowing unauthorized report generation and potential information disclosure. CVE-2026-11744 JavaScript injection affecting the PaperCut Hive embedded application for Ricoh devices and requiring physical access. 🛡️ Fixes PaperCut NG/MF: → 26.0.5 or later → 25.0.13 or later on the 25.x branch PaperCut Hive Ricoh Embedded App: → 2.3.0 or later ⚠️ Important caveat PaperCut says it currently has no evidence that these vulnerabilities have been exploited. CyberSignal Insight: Not every RCE equals unauthenticated compromise — both PaperCut RCE vulnerabilities require existing administrator access, which significantly changes the threat model. Sources: PaperCut · CERT-FR

NewNormal Security turns CVEs since the previous batch into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 24 Sep 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 🔑 Blank default JWT signing secret — forge an admin session, and nothing can revoke it (SigNoz CVE-2026-97055) 🔓 Reports built for callers who never logged in — user names, devices, print history (PaperCut CVE-2026-87739) 📂 Path traversal in scan-to-fax settings — an admin foothold becomes commands on the host (PaperCut CVE-2026-82077) Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #JWT #CSO #REDTEAM