Threats tagged 'ghsa-845j-gc55-fc8w'

CVE-2026-8793 is a vulnerability in PaperCut NG/MF where the software does not properly restrict excessive authentication attempts. This allows unauthenticated remote attackers to perform unlimited brute-force or credential-stuffing attacks without triggering account lockout or rate-limiting in some configurations. The vulnerability has a medium severity rating with a CVSS score of 6.9. No patch or official remediation guidance is currently available, and no known exploits are reported in the wild.