CVE-2026-81578
PaperCut Flaws Exploited in Attacks on U.S. and European Schools
Attackers are actively exploiting two recently disclosed vulnerabilities in PaperCut, an enterprise print management platform, to compromise educational institutions across the United States and Europe. The flaws, identified as CVE-2026-81578 and CVE-2026-82078, allow for credential theft and elevated access.
CVE-2026-81578
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Recent reports indicate that threat actors are actively exploiting newly disclosed vulnerabilities in PaperCut software to steal credentials, primarily targeting the education sector across the U.S. and Europe. The Arctic Wolf Adversary Research Team has observed these attacks, detailing the use of an authentication bypass and remote code execution chain to achieve command execution and…
vulnerabilityhigh
Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch
PaperCut, a widely used print management software, has confirmed active exploitation of a pre-authentication remote code execution vulnerability in its servers, with nearly half of tracked installations remaining unpatched. The flaw, which affects schools, hospitals, and offices globally, was confirmed by PaperCut on August 27, following observations of real-world attacks.
CVE-2026-82078critical
PaperCut releases second emergency patch for exploited flaws
PaperCut has issued a second emergency security update for its NG and MF print management software, addressing two actively exploited vulnerabilities after researchers identified multiple methods to bypass the initial fixes. The company had previously released an emergency patch for PaperCut NG/MF versions 25 and 26, warning of zero-day exploitation, but initially withheld technical details…
vulnerability
PaperCut warns of hackers using printer management software flaw in attacks
PaperCut has issued an urgent warning to customers regarding active exploitation of vulnerabilities in its printer management software, PaperCut NG and MF. The company confirmed that cybercriminals are leveraging these flaws in ongoing attacks, prompting the release of emergency patches.
