PaperCut
CVEs currently on EVULNABLE's Priority Feed for PaperCut, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 2 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 1 | 1 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 2 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 5 PaperCut CVEs in EVULNABLE's ranked feed.
#1 94 Immediate CVE-2023-27350 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV PaperCut — PaperCut MF/NG Improper Access Control Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 87 Immediate CVE-2023-27351 CISA federal deadline · Overdue by 5 monthsRansomwareCISA KEV PaperCut — PaperCut NG/MF Improper Authentication Vulnerability KEV + ransomware, EPSS 78.1%
EVRS 87/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 86 Immediate CVE-2026-81578 CISA federal deadline · Overdue by 33 daysCISA KEV PaperCut — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability KEV, EPSS 85.6%, added to KEV within the last 90 days
EVRS 86/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.856.
#4 81 Urgent CVE-2026-82078 CISA federal deadline · Overdue by 33 daysCISA KEV PaperCut — PaperCut NG/MF Unsafe Reflection Vulnerability KEV, EPSS 63.5%, added to KEV within the last 90 days
EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.635.
#5 75 Urgent CVE-2023-2533 KEV since 2025 · listed over a yearCISA KEV PaperCut — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability KEV, EPSS 28.6%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.286.