CVE-2026-5115 | PaperCut NG/MF up to 25.0.4 Communication Channel cleartext transmission

VDB-354310 · CVE-2026-5115 · GCVE-0-2026-5115 PAPERCUT NG/MF UP TO 25.0.4 COMMUNICATION CHANNEL CLEARTEXT TRANSMISSION HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.6 $0-$5k 1.49+ Summaryinfo A vulnerability described as problematic has been identified in PaperCut NG and MF up to 25.0.4. Affected by this vulnerability is an unknown functionality of the component Communication Channel Handler. Executing a manipulation can lead to cleartext transmission. This vulnerability is registered as CVE-2026-5115. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended. Detailsinfo A vulnerability was found in PaperCut NG and MF up to 25.0.4. It has been declared as problematic. This vulnerability affects an unknown code block of the component Communication Channel Handler. The manipulation with an unknown input leads to a cleartext transmission vulnerability. The CWE definition for the vulnerability is CWE-319. The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. As an impact it is known to affect confidentiality. CVE summarizes: The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the communication channel between the embedded application and the server was insecure, which could leak data including sensitive information that may be used to mount an  attack on the device. Such an attack could potentially be used to steal data or to perform a phishing attack on the end user. The weakness was published by Xavier Gibbon. The advisory is available at papercut.com. This vulnerability was named CVE-2026-5115 since 03/30/2026. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1040 by the MITRE ATT&CK project. Upgrading to version 25.0.5 eliminates this vulnerability. Productinfo Vendor PaperCut Name MF NG Version 25.0.0 25.0.1 25.0.2 25.0.3 25.0.4 CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA CVSS-B Score: 🔒 CNA CVSS-BT Score: 🔒 CNA Vector: 🔒 CVSSv3info VulDB Meta Base Score: 3.7 VulDB Meta Temp Score: 3.6 VulDB Base Score: 3.7 VulDB Temp Score: 3.6 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Cleartext transmission CWE: CWE-319 / CWE-310 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Yes Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: NG/MF 25.0.5 Timelineinfo 03/30/2026 CVE reserved 03/31/2026 +1 days Advisory disclosed 03/31/2026 +0 days VulDB entry created 03/31/2026 +0 days VulDB entry last update Sourcesinfo Advisory: papercut.com Researcher: Xavier Gibbon Status: Confirmed CVE: CVE-2026-5115 (🔒) GCVE (CVE): GCVE-0-2026-5115 GCVE (VulDB): GCVE-100-354310 Entryinfo Created: 03/31/2026 08:12 Changes: 03/31/2026 08:12 (69) Complete: 🔍 Cache ID: 99:A75:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸