mf_ng vulnerabilities

CVEs whose affected-version data names the mf_ng package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82078Critical· 9.4CISA KEVPoC

3w ago

PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against …

▾ HadalPaperCut · PaperCut MF/NGEPSS 3.6%via CVEORG