CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 4, 2026

CVE-2023-27351

High

CISA KEV

Description

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.

Required Action

https://www.papercut.com/kb/Main/PO-1216-and-PO-1219 ; https://nvd.nist.gov/vuln/detail/CVE-2023-27351

Risk Assessment

ELEVATED

In CISA KEV

Details

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Apr 20, 2026

Added to KEV

Apr 20, 2026

Remediation Due

May 4, 2026

Affected Product

PaperCut

NG/MF

View all PaperCut CVEs

External Links

NVD (NIST)CVE Details MITRE CVE