CVE-2026-82077
HIGH—CVSS v3
—CVSS v2
0.74%
EPSS (exploit probability)
CWE-22CWE
Description
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
Affected routers (0)
No routers currently mapped to this CVE in our database.