MEDIUM 6.9 NVD

CVE-2026-8793

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vuln

PaperCut NG/MF does not properly restrict excessive authentication attempts within its login component. An unauthenticated remote attacker can exploit this vulnerability to perform unrestricted brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting mechanisms in some configurations.

References

https://www.papercut.com/kb/Main/papercut-ng-mf-security-bulletin-3-aug-2026/

Published: 2026-08-03 · Source: NVD · Feed updated: 2026-08-04

This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-08-03 via NVD.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.