https://patchfirst.co/vendor/papercut/New and newly exploited PaperCut CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-81578/CVE-2026-81578#kevMon, 31 Aug 2026 00:00:00 GMTPaperCut · NG/MF. In CISA KEV since 2026-08-31. ENISA EUVD lists it as exploited. EPSS 84.7% (higher than 99.71% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098 Account Manipulation. Named in 1 threat report. Priority 83.7 of 100.kevpublic-exploitT1190T1098https://patchfirst.co/cve/CVE-2026-82078/CVE-2026-82078#kevMon, 31 Aug 2026 00:00:00 GMTPaperCut · NG/MF. In CISA KEV since 2026-08-31. ENISA EUVD lists it as exploited. EPSS 63.0% (higher than 99.2% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 83.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2023-27351/CVE-2023-27351#kevMon, 20 Apr 2026 00:00:00 GMTPaperCut · NG/MF. In CISA KEV since 2026-04-20, known ransomware use. ENISA EUVD lists it as exploited. EPSS 78.1% (higher than 99.58% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 78.2 of 100.kevransomwarepublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2023-2533/CVE-2023-2533#kevMon, 28 Jul 2025 00:00:00 GMTPaperCut · NG/MF. In CISA KEV since 2025-07-28. ENISA EUVD lists it as exploited. EPSS 28.8% (higher than 98.1% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1566.002 Spearphishing Link; T1059 Command and Scripting Interpreter; T1547 Boot or Logon Autostart Execution. Priority 68.8 of 100.kevpublic-exploitT1566.002T1059T1547https://patchfirst.co/cve/CVE-2023-39470/CVE-2023-39470Fri, 22 Nov 2024 00:00:00 GMTPaperCut · NG. Not in CISA KEV. EPSS 1.8% (higher than 78.1% of CVEs). CVSS 7.2 HIGH. Priority 65.7 of 100.https://patchfirst.co/cve/CVE-2023-39469/CVE-2023-39469Fri, 03 May 2024 00:00:00 GMTPaperCut · NG. Not in CISA KEV. EPSS 61.4% (higher than 99.16% of CVEs). CVSS 7.2 HIGH. Priority 24.9 of 100.https://patchfirst.co/cve/CVE-2024-1222/CVE-2024-1222Thu, 14 Mar 2024 00:00:00 GMTPaperCut · PaperCut NG, PaperCut MF. Not in CISA KEV. EPSS 64.0% (higher than 99.22% of CVEs). CVSS 8.6 HIGH. Priority 25.9 of 100.https://patchfirst.co/cve/CVE-2024-1883/CVE-2024-1883Thu, 14 Mar 2024 00:00:00 GMTPaperCut · PaperCut NG, PaperCut MF. Not in CISA KEV. EPSS 61.5% (higher than 99.16% of CVEs). CVSS 6.3 MEDIUM. Priority 24.2 of 100.https://patchfirst.co/cve/CVE-2023-3486/CVE-2023-3486Tue, 25 Jul 2023 00:00:00 GMTPaperCut · PaperCut NG. Not in CISA KEV. EPSS 79.2% (higher than 99.6% of CVEs). CVSS 8.2 HIGH. Priority 25.7 of 100.https://patchfirst.co/cve/CVE-2023-27350/CVE-2023-27350#kevFri, 21 Apr 2023 00:00:00 GMTPaperCut · MF/NG. In CISA KEV since 2023-04-21, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059T1105