PT-2026-36984 · Papercut · Papercut Hive Ricoh Embedded Application

Hayden Moore · Published 2026-05-05 · Updated 2026-05-05 · CVE-2026-7824

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PaperCut Hive Ricoh embedded application (affected versions not specified)

Description An issue exists where the application records administrative credentials in plain text within log files when the "Deep Logging" (diagnostic) mode is enabled. An attacker with administrative access to the PaperCut Hive management portal can remotely enable this mode and retrieve sensitive device passwords after an authorized user authenticates at the device, potentially enabling lateral movement or unauthorized configuration of the physical print hardware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-7824

Affected Products

Papercut Hive Ricoh Embedded Application

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-7824 · Security Note
• https://papercut.com/kb/Main/papercut-ng-mf-and-papercut-hive-security-bulletin-may-2026 · Note
• https://twitter.com/CVEnew/status/2051595420774842433 · Twitter Post
• https://t.me/CVEtracker/52724 · Telegram Post
• https://twitter.com/infoflowcloud/status/2051596919990808599 · Twitter Post