References https://horizon3.ai/attack-research/attack-blogs/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise/ https://www.darkrelay.com/post/cve-2023-27350-papercut-print-management-remote-bypass https://success.trendmicro.com/en-US/solution/KA-0014401 https://www.greynoise.io/tagsmas/dec-5 https://nvd.nist.gov/vuln/detail/CVE-2023-27350 https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-131a https://www.tenable.com/plugins/was/113932 https://www.exploit-db.com/exploits/51452 https://www.papercut.com/kb/Main/PO-1216-and-PO-1219/ https://tryhackme.com/room/papercut https://www.papercut.com/kb/Main/SecurityBulletinJune2023/ https://vulners.com/cve/CVE-2023-27350 https://www.splunk.com/en_us/blog/security/don-t-get-a-papercut-analyzing-cve-2023-27350.html https://ethicalhacking.uk/cve-2023-27350-an-authentication-bypass-vulnerability-in-papercut-mf-ng/ https://www.cnblogs.com/Domren/articles/19899654 https://www.hkcert.org/tc/security-bulletin/papercut-multiple-vulnerabilities_20260421 https://qkl.seebug.org/vuldb/ssvid-99678 https://www.papercut.com/kb/Main/CommonSecurityQuestions/
Related VulnerabilitiesPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-30965: Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token ExfiltrationPaperCut NG/MF /rpc/api/rest/master/user/createInternalUser;/keepalive 权限绕过漏洞 (CVE-2023-27351)PoCCVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession DeserializationPoCCVE-2026-41940: cPanel & WHM - Authentication Bypass via Session-File CRLF InjectionPoCCVE-2023-5203: WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL InjectionPoCCVE-2025-28242: DAEnetIP4 METO v1.25 - Session HijackingPoClaravel-sessions-exposure: Laravel Sessions Folder ExposureOpenCode /session 代码执行漏洞(CVE-2026-22812)Cal.com /api/auth/session 权限绕过漏洞(CVE-2026-23478)