VulnerabilityBleeping Computer
9.8 — CRITICAL
PaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
PaperCut has released a second emergency patch for two actively exploited vulnerabilities in its PaperCut NG and MF print management software, allowing unauthenticated attackers to bypass authentication and gain remote code execution on affected systems.
⚙️Technical Details
CVEs
CVE-2026-82078CVE-2026-81578
Affected Systems
PaperCut NGPaperCut MF
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
🛡️Recommended Actions
1Install Emergency Patch Release 2
2Restrict access to web interfaces to trusted IP addresses using firewall rules or network access controls
3Monitor for suspicious post-exploitation activity from the pc-app.exe process, missing or truncated server.log files, and specific errors in the server.log
📦Affected Products
Papercut Papercut MfPapercut Papercut NgPaperCut NGPaperCut MF
🔐NVD Verified DataVERIFIED
CVE-2026-82078 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-470
Affected Products (CPE)
Papercut Papercut MfPapercut Papercut Ng
CVE-2026-81578 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-305
Affected Products (CPE)
Papercut Papercut MfPapercut Papercut Ng
CVE-2023-27350 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-284
Affected Products (CPE)
Papercut Papercut MfPapercut Papercut Ng
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.