Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.8

PaperCut Hive on Ricoh devices enables NFC code injection

CVE-2026-11744 · published 25 days ago
Summary

The PaperCut Hive software built into Ricoh printers does not clean up data read from NFC cards before showing it in the screen. Someone with physical access who uses a specially modified NFC card could cause the printer to perform actions it shouldn't or reveal information. Update the software to the latest version and limit or monitor NFC use until the fix is applied.

What to do
  • Update papercut papercut hive to version 2.3.0 or later.
Affected software
VendorProductAffected versions
papercut papercut hive < 2.3.0
Original advisory text
PaperCut Hive Embedded App for Ricoh: Javascript injection
An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card reading process before passing it to the application's web view interface. A local attacker with physical access to the device and a specially crafted NFC card or emulator could exploit this flaw to execute arbitrary code within the context of the application's user interface. This could result in unauthorized actions or information disclosure.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.8 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published24 Sep 2026
Updated14 Oct 2026
First seen24 Sep 2026
Sources
CVE-2026-11744 · NVD
CVE-2026-11744 · MITRE
Track software like this
Free during beta