CVE-2024-8405

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack. Note: This CVE has been split from CVE-2024-4712.

• CWE-77
• CWE-77

• https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/Vendor Advisory

Published

Sep 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8399Websites could utilize Javascript links to spoof URL address…4.7
• CVE-2024-8400A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2024-8401CWE-79: Improper Neutralization of Input During Web Page Gen…5.4
• CVE-2024-8402An issue was discovered in GitLab EE affecting all versions …7.4
• CVE-2024-8403Improper Validation of Specified Type of Input vulnerability…7.5
• CVE-2024-8404An arbitrary file deletion vulnerability exists in PaperCut …7.8
• CVE-2024-8407A vulnerability was found in alwindoss akademy up to 35cacce…5.4
• CVE-2024-8408A vulnerability was found in Linksys WRT54G 4.21.5. It has b…9.8
• CVE-2024-8409A vulnerability classified as problematic has been found in …7.5
• CVE-2024-8410A vulnerability classified as problematic was found in ABCD …7.5
• CVE-2024-8411A vulnerability was determined in ABCD ABCD2 up to 2.2.0-bet…4.3
• CVE-2024-8412A vulnerability, which was classified as problematic, was fo…6.1