Sensitive Credential Exposure in PaperCut Hive by PaperCut

CVE-2026-7824

What is CVE-2026-7824?

A security issue has been identified in the PaperCut Hive Ricoh embedded application. When the 'Deep Logging' feature is activated for diagnostic purposes, the application can unintentionally log sensitive administrative credentials in plain text. This vulnerability enables an attacker with administrative access to the PaperCut Hive management portal to enable deep logging remotely. Following an authorized user’s authentication at the device, the attacker can then retrieve sensitive passwords from the logs, which can lead to unauthorized configuration of physical print hardware and lateral movement within the network.

References