PaperCut attacks escalate to hands-on-keyboard intrusions
Image: Primary Attacks exploiting two PaperCut NG/MF vulnerabilities have moved from reconnaissance to hands-on-keyboard activity, according to WatchTowr researchers cited by SecurityWeek.
The flaws, CVE-2026-82078 and CVE-2026-81578, can let unauthenticated attackers bypass authentication and execute code on affected instances. PaperCut issued emergency patches after the first fix was bypassed and is preparing an official release addressing both flaws. CISA added both vulnerabilities to its Known Exploited Vulnerabilities catalog and directed federal agencies to address them by September 14.
ShadowServer data cited in the report showed more than 1,000 exposed instances.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
