PaperCut Under Active Attack: Two CVEs, One Failed Patch
PaperCut Under Active Attack: Two CVEs, One Failed Patch
CISA confirmed on 31 August that two vulnerabilities in PaperCut NG and MF print management software are being actively exploited in the wild. CVE-2026-81578 allows unauthenticated remote attackers to bypass authentication and access admin functions, whilst CVE-2026-82078 enables arbitrary code execution once inside. The vulnerabilities are designed to be chained together, and the initial emergency patch issued by PaperCut was broken by security researchers within days, forcing a second fix. For UK small businesses running PaperCut…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.