Input Validation Vulnerability in PaperCut Hive for Ricoh Devices
CVE-2026-11744

3.8LOW

Key Information:

Vendor

Papercut

Status
Papercut Hive
Vendor
CVE Published:
24 September 2026

What is CVE-2026-11744?

An input validation issue exists in the PaperCut Hive embedded application for Ricoh devices, which does not properly sanitize input from NFC card readings. This flaw allows local attackers, with physical access, to exploit the application by utilizing a specially crafted NFC card or a card emulator. Successful exploitation can lead to unauthorized actions and potential information disclosure through the application's web view interface.

Affected Version(s)

PaperCut Hive 2.0.0 < 2.3.0

References

https://www.papercut.com/kb/Main/security-bulletin-sep-2026/

CVSS V4

Score:
3.8
Severity:
LOW
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.