https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 09:17:20 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1223 certfr-2026-avi-1223 https://db.gcve.eu/vuln/certfr-2026-avi-1223 https://db.gcve.eu/vuln/fkie_cve-2026-14780 <p>A vulnerability exists in the PaperCut NG/MF platform&#39;s device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox.</p> <p>A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.</p> <p>A vulnerability exists in the PaperCut NG/MF platform&#39;s device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox.</p> <p>A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.</p> https://db.gcve.eu/vuln/fkie_cve-2026-14780 https://db.gcve.eu/vuln/ghsa-rrvj-pgxj-7php <p>A vulnerability exists in the PaperCut NG/MF platform&#39;s device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox.</p> <p>A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.</p> <p>A vulnerability exists in the PaperCut NG/MF platform&#39;s device-scripting functionality due to insufficient sanitization and access restrictions within the embedded execution engine. An authenticated user with administrative access to the management interface can supply a malicious script that escapes the runtime sandbox.</p> <p>A successful execution enables an attacker to run unauthorized operating system commands with administrative privileges on the host operating system.</p> https://db.gcve.eu/vuln/ghsa-rrvj-pgxj-7php