Research · Aug 28, 2026 · ZeroDay Catalog
Critical Unsafe Reflection Vulnerability in PaperCut NG/MF
A critical vulnerability has been identified in PaperCut NG and MF, allowing for unsafe dynamic class loading that could lead to arbitrary code execution.
What changed
A significant vulnerability has been discovered in the database connection utilities of PaperCut NG and MF. This flaw allows for unsafe dynamic class loading, which could potentially lead to the execution of arbitrary Java bytecode.
The vulnerability arises from the application instantiating database driver classes based on user-configurable driver names without proper validation against an allowlist.
Who is affected
Organizations utilizing PaperCut NG or MF for print management are at risk due to this vulnerability. The flaw could be exploited if an attacker gains access to manipulate system configuration parameters.
This vulnerability impacts various sectors, including educational institutions, corporate environments, and government agencies that rely on PaperCut for their printing solutions.
- PaperCut NG
- PaperCut MF
- Educational institutions using PaperCut
- Corporate environments leveraging PaperCut solutions
What to do
It is crucial for affected organizations to review their configurations and ensure that only approved database drivers are utilized. Immediate updates or patches from PaperCut should be applied to mitigate this risk.
Security teams should also monitor for any unusual activity that may indicate exploitation attempts and consider implementing additional security measures to safeguard their systems.
- Review and validate database driver configurations.
- Apply patches or updates provided by PaperCut.
- Monitor system activity for signs of exploitation.
- Implement additional security measures as necessary.