CVE-2026-14780
— UNSCOREDPublished 2026-09-24 · Updated 2026-09-25
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability exists in the PaperCut NG/MF platform's device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox. A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.
Weaknesses
CWE-94
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2024-42002PoC
- UNSCOREDCVE-2026-100174PoC
- LOWCVE-2026-100311PoC
- MEDIUMCVE-2026-100313PoC
- HIGHCVE-2026-100839PoC
- HIGHCVE-2026-100856PoC
- HIGHCVE-2026-100857PoC
- HIGHCVE-2026-100864PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.