Preliminary research
Death By A Thousand PaperCuts: PaperCut pre-authentication RCE and patch bypasses
AI-collected research leads through 12 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
The article shows that PaperCut's Apache Tapestry routing validates only a root page, allowing unauthenticated access to setup forms and an administrator-password reset. It chains that bypass with a Scan-to-Fax connector path traversal and controlled command arguments to obtain pre-authentication code execution on an intermediate patched build.
Record
- Researcher
- Piotr Bazydlo
- Published by
- watchTowr Labs
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Piotr Bazydlo, first published at the original source. Preserved copies are kept so the citation survives its host.