Vulnerabilidades do PaperCut PaperCut Hive
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam PaperCut PaperCut Hive: 2 registro(s), com versões afetadas e correções.
CVE-2026-11744
Baixa · 3.8
CWE-79 24/09/2026
PaperCut Hive Embedded App for Ricoh: Javascript injection
An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card reading process before passing it to the application's web view interface. A local attacker with physical access to the device and a specially crafted NFC card or emulator could exploit this flaw to execute arbitrary code within the context of the application's user interface. This could result in unauthorized actions or information disclosure.
CVE-2026-7824
Média · 5.9
CWE-532 05/05/2026
PaperCut Hive (Ricoh): Plain text password in logs
An issue was discovered in the PaperCut Hive Ricoh embedded application. When the "Deep Logging" (diagnostic) mode is enabled, the application inadvertently records administrative credentials in plain text within the log files.
An attacker with administrative access to the PaperCut Hive management portal could remotely enable deep logging and subsequently retrieve sensitive device passwords from the logs after an authorized user authenticates at the device. This exposure allows for the lateral movement or unauthorized configuration of the physical print hardware.