{"vulnerability": "cve-2026-8157", "sightings": [{"uuid": "fdb789c0-a1b9-4f0f-bd73-cb170d343dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mudnnyzvru2m", "content": "PaperCut Issues Second Patch as Bypasses Found https://0daynews.com/articles/2026-08-29-papercut-second-patch-cve-2026-81578-82078", "creation_timestamp": "2026-08-31T00:30:17.179490Z"}, {"uuid": "ecf9f320-611b-4bc5-9256-1086d229aa3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "Telegram/25UzGBv5U41Up4gIz_3r2lNykNtWwaYPpQSQB5sUlEcEi44", "content": "", "creation_timestamp": "2026-08-29T23:00:04.202986Z"}, {"uuid": "7b62c8fe-bb4d-4ecf-96fa-02628693efea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-29T23:00:05.620805Z"}, {"uuid": "a03b4a3b-3eb7-4d53-b9d9-29ca3d67a7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "Telegram/59qmJbxlXRw1hpXLsNomAnJqLLMJaCeoeuKXV4P1Fhmqb-w", "content": "", "creation_timestamp": "2026-08-29T23:00:05.824883Z"}, {"uuid": "98e72fd4-3570-4e87-b852-634b175bd424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "published-proof-of-concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-30T00:00:07.440069Z"}, {"uuid": "f74c391a-0df8-4d97-be67-4aba0f8104e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/papercut-multiple-vulnerabilities_20260831", "content": "", "creation_timestamp": "2026-08-31T05:19:00.229830Z"}, {"uuid": "d5989e94-63c4-4be6-b8db-574531e2f345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8157", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mouej4ydjs2l", "content": "Vitepos <3.4.2 HIGH severity vuln (CVE-2026-8157): Auth users with custom roles can escalate to admin via REST API. Restrict endpoint access & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-8157-cwe-269-improper-privilege-managemen-ad086b248eb210ce #OffSeq #WordPress #Security", "creation_timestamp": "2026-06-22T07:30:35.025842Z"}, {"uuid": "3c2472b2-bfcb-487e-a8d8-afa38af38723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8157", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116792585922539614", "content": "Vitepos WordPress plugin <3.4.2 has a HIGH severity privilege escalation vuln (CVE-2026-8157). Auth users with custom Vitepos roles can become admins via REST API. Restrict API access & monitor for patches. https://radar.offseq.com/threat/cve-2026-8157-cwe-269-improper-privilege-managemen-ad086b248eb210ce #OffSeq #WordPress #CVE20268157 #Infosec", "creation_timestamp": "2026-06-22T07:30:35.542089Z"}, {"uuid": "f38d98af-f8f4-4f79-a4a8-e59cf0955047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8157", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mougxkmsvw2y", "content": "CVE-2026-8157 - Vitepos\nCVE ID : CVE-2026-8157\n \n Published : June 22, 2026, 6 a.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : The Vitepos WordPress plugin before 3.4.2 does not properly restrict the roles that can be assigned when creating new users via one of its REST API end...", "creation_timestamp": "2026-06-22T08:14:26.442137Z"}, {"uuid": "4020b079-4ad3-4479-badc-7a1d9c89b2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://www.acn.gov.it/portale/w/papercut-rilevato-sfruttamento-in-rete-delle-cve-2026-82078-e-cve-2026-81578", "content": "", "creation_timestamp": "2026-08-31T12:15:14.984984Z"}, {"uuid": "2e794c3c-2bf5-4d30-996e-5cdcdb43dc50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/true_secator/8559", "content": "PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u044c\u044e PaperCut NG \u0438 MF \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u043d\u0435\u0435 PaperCut \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 PaperCut NG/MF 25 \u0438 26.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u043a\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2026-82078 \u0438 CVE-2026-81578, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nCVE-2026-81578 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PaperCut NG/MF.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0431\u044d\u043a\u044d\u043d\u0434\u0435 \u0434\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-82078 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 PaperCut.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u0438\u0445 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\u00a0\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 Java, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0443\u0442\u0438 \u043a \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 PaperCut.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u0440\u0435\u043b\u0438\u0437 2, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Huntress \u0438 watchTowr.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\nHuntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043b\u043e\u0433\u0430\u0445 PaperCut \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0444\u0430\u0439\u043b\u044b Java \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .class \u0432 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0441\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0435\u0436\u0434\u0443 PaperCut \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Huntress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430 \u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nHuntress \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432 PaperCut.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 2 \u0434\u043b\u044f PaperCut NG \u0438 MF \u0432\u0435\u0440\u0441\u0438\u0439 24, 25 \u0438 26 \u043d\u0430 Windows, Linux \u0438 macOS. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e 23 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u043d\u0435 \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432.\n\nPaperCut \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 pc-app.exe \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043b\u0438 \u0443\u0441\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b server.log, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 server.log.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.", "creation_timestamp": "2026-08-31T13:00:04.605680Z"}, {"uuid": "03729116-1732-4083-be2f-b578a979b4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xjn3nwj2g", "content": "~Cybergcca~\nPaperCut CVE-2026-81578 and CVE-2026-82078 are exploited in the wild; patch affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, CVE-2026-19516\n-\n#PaperCut #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:16:07.994606Z"}, {"uuid": "cfd74037-1eb8-4ce5-97ba-dc9a5f9dff5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6mps6inc23", "content": "\ud83d\udea8 PaperCut NG/MF \u2014 RCE attacks are active\n\nCVE-2026-81578 + CVE-2026-82078 can be chained for unauthenticated RCE. PaperCut has released Emergency Patch Release 2.\n\nstemshop.top/blog/papercu...\n\n#CVE #PaperCut #RCE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T00:30:10.096569Z"}, {"uuid": "018a72df-9264-4c4d-8ff2-fce41772f236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ehdjq25bhgcu6", "content": "CVE-2026-81573 - Improper Access Control in Local-Only Configuration Commands\nCVE ID : CVE-2026-81573\n \n Published : Aug. 27, 2026, 10:16 a.m. | 19\u00a0minutes ago\n \n Description : If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handl...", "creation_timestamp": "2026-08-27T10:47:15.371397Z"}, {"uuid": "6126dc32-f1cf-489b-a40b-b7fae8d32ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/52hwmuei26bo6", "content": "CVE-2026-81579 - An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows\nCVE ID : CVE-2026-81579\n \n Published : Aug. 27, 2026, 10:16 a.m. | 19\u00a0minutes ago\n \n Description : In WibuKey for Windows before version 6.71, an untrus...", "creation_timestamp": "2026-08-27T10:59:15.393039Z"}, {"uuid": "e193e91d-3d35-4e2a-9241-3a39920e8ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81574", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2p267o7c2l", "content": "\ud83d\udfe0 CVE-2026-81574 - High (8.2)\n\nIn CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81574/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T11:01:01.269024Z"}, {"uuid": "d16a833a-7d66-46ac-9300-7c78d071c049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2p2ezi6m22", "content": "\ud83d\udfe0 CVE-2026-81575 - High (7.5)\n\nIf configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81575/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T11:01:08.121481Z"}, {"uuid": "7c3b5754-02d9-4b47-bb32-471467a544f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81574", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ibazv6h46utsr", "content": "CVE-2026-81574 - Format String Vulnerability in Logger\nCVE ID : CVE-2026-81574\n \n Published : Aug. 27, 2026, 10:16 a.m. | 19\u00a0minutes ago\n \n Description : In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing ...", "creation_timestamp": "2026-08-27T11:01:15.092661Z"}, {"uuid": "c222f5e4-e9b0-44a7-999c-3f3b020a378b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81576", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2sejji6q2m", "content": "\ud83d\udfe0 CVE-2026-81576 - High (7.7)\n\nIf configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per co...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81576/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T12:00:30.134675Z"}, {"uuid": "92bdc95a-d256-44a7-a43b-b98cc0bf4b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81579", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2seq7gui2m", "content": "\ud83d\udfe0 CVE-2026-81579 - High (8.8)\n\nIn WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81579/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T12:00:36.768466Z"}, {"uuid": "101383c2-7de1-4cf3-88bf-fe1aaa21b69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81572", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2sgmf2gn2t", "content": "\ud83d\udfe0 CVE-2026-81572 - High (7.8)\n\ncmu.exe --create-io --file C: creates a predictable temporary file under C:\\CM-Stick. The directo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81572/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T12:01:39.940072Z"}, {"uuid": "d8510ddf-0f26-49a0-bc20-fbf122b79dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mu6og3yyf62w", "content": "PaperCut says flaws in NG and MF, tracked as CVE-2026-82078 and CVE-2026-81578, are being actively exploited in customer incidents. Emergency patches are out after the first fix fell short. #PaperCut #CVE202682078 #CVE202681578", "creation_timestamp": "2026-08-29T01:00:28.350508Z"}, {"uuid": "131c0e8e-9472-40c8-ab63-b79b3089671d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81573", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0333", "content": "", "creation_timestamp": "2026-08-28T12:45:37.600933Z"}, {"uuid": "d51e003a-0de3-405c-90e6-c6b5441b8aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81573", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vsol5wq2t", "content": "\ud83d\udfe0 CVE-2026-81573 - High (8.6)\n\nIf CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command ha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81573/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T13:02:06.296543Z"}, {"uuid": "1bb389d0-b29b-4109-ba4c-f288461a9b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "published-proof-of-concept", "source": "Telegram/59qmJbxlXRw1hpXLsNomAnJqLLMJaCeoeuKXV4P1Fhmqb-w", "content": "", "creation_timestamp": "2026-08-31T00:00:50.695473Z"}, {"uuid": "62e44f47-381a-447e-810c-9ca85f190468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81572", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117168067495847692", "content": "CVE-2026-81572 - LPE in CodeMeter Runtime allows arbitrary file deletion with SYSTEM privileges via NTFS reparse points. CVSS 7.8. Audit hosts now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-81572/", "creation_timestamp": "2026-08-27T15:00:41.157382Z"}, {"uuid": "40d8da88-012a-4b61-8e4d-93d8672839c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81572", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu34gcwbox2m", "content": "CVE-2026-81572 - LPE in CodeMeter Runtime allows arbitrary file deletion with SYSTEM privileges via NTFS reparse points. CVSS 7.8. Audit hosts now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-81572/", "creation_timestamp": "2026-08-27T15:00:31.820471Z"}, {"uuid": "72953c07-3422-42dc-9da7-b95650ac1b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117179067595414659", "content": "\ud83d\udcf0 PaperCut Zero-Day RCE Actively Exploited; Emergency Patches Released\n\ud83d\udea8 URGENT: PaperCut warns of an actively exploited zero-day RCE vulnerability chain affecting all NG/MF versions. The pre-auth flaws (CVE-2026-81578, CVE-2026-82078) allow full server takeover. Patch immediately! #Cybersecurity #ZeroDay #PaperCut\n\ud83d\udd17 https://cyber.netsecops.io/articles/papercut-warns-of-actively-exploited-zero-day-rce-vulnerability/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-29T13:37:59.443875Z"}, {"uuid": "d5d9037a-baeb-43c0-bf0f-83653e57b12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81573", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0333", "content": "Wibu-Systems heeft meerdere kwetsbaarheden verholpen in CodeMeter Runtime. De kwetsbaarheden bevinden zich in verschillende onderdelen van CodeMeter Runtime, met name in versies voor 8.41a en 9.10. Een lokale aanvaller kan misbruik maken van onjuiste verificatie van NTFS reparse points bij het aanmaken van tijdelijke bestanden door cmu.exe, wat kan leiden tot het verwijderen van willekeurige systeembestanden met System-privileges en daarmee lokale privilege-escalatie.\n\nDaarnaast bevat de configuratie command handler een fout waardoor netwerkrestricties niet correct worden afgedwongen, wat een aanvaller op afstand in staat stelt om ongeautoriseerde toegang te verkrijgen tot gevoelige configuratiegegevens en controle over de WebAdmin interface. Verder is er een input sanitization probleem in de logger module, waardoor format specifiers kunnen worden ge\u00efnjecteerd, wat kan leiden tot crashes en mogelijk informatielekken, zowel lokaal als op afstand, vooral in combinatie met CVE-2026-81573. Ook ontbreekt er correcte bounds checking op de data length in opcode 0x5e requests, wat een segmentation fault kan veroorzaken en de stabiliteit van de servercomponent kan be\u00efnvloeden. Ten slotte wordt een zwakke SID gebruikt voor authenticatie, waardoor brute-force aanvallen mogelijk zijn om toegang te krijgen tot sessiehandles en daarmee tot licentie-informatie van andere sessies.", "creation_timestamp": "2026-08-29T01:00:34.718712Z"}, {"uuid": "f1b15c09-0269-43d8-bec4-3e15766698bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mu5ggzdvtt2j", "content": "\ud83d\udd17 CVE : CVE-2026-81578, CVE-2026-82078", "creation_timestamp": "2026-08-28T13:05:07.069354Z"}, {"uuid": "187bc6f2-c066-434d-ae39-275b43393125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mu7yriretx26", "content": "\ud83d\udea8 URGENT: PaperCut warns of an actively exploited zero-day RCE vulnerability chain affecting all NG/MF versions. The pre-auth flaws (CVE-2026-81578, CVE-2026-82078) allow full server takeover. Patch immediately! #Cybersecurity #ZeroDay #PaperCut\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-29T13:38:26.099492Z"}, {"uuid": "e2fe66a9-411f-4260-a4cc-b6c2b44c6a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mu75cviclk2v", "content": "PaperCut Under Active Attack: Full Technical Analysis of the Pre-Auth RCE Chain (CVE-2026-81578 +\u00a0CVE-2026-82078)\n\nActive exploitation of PaperCut NG/MF pre-auth RCE (CVE-2026-81578, CVE-2026-82078).\u2026\n\nhttps://thecybersecguru.com/news/papercut-cve-2026-81578-cve-2026-82078-pre-auth-rce-analysis/", "creation_timestamp": "2026-08-29T05:27:06.470962Z"}, {"uuid": "ff944eaa-fd95-4347-a097-c3ed34fee1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mu5m2gyywh25", "content": "The watchTowr team is currently working with PaperCut directly to resolve bypasses in patches released for the actively exploited zero-day vulnerabilities (now CVE-2026-81578, CVE-2026-82078) in PaperCut NG/MF.\n\nThis\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2093345328170758218)", "creation_timestamp": "2026-08-28T14:45:33.393779Z"}, {"uuid": "7865cb86-fdf0-45ea-beae-a2e7ccfe1cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "Telegram/_MkvWCyWZJHe2RNbxcbbJ8w73Oq-ZroyWog-I1ehVh_MDUs", "content": "", "creation_timestamp": "2026-08-29T00:00:06.809427Z"}, {"uuid": "53dfc506-ae1b-4bef-810a-fb47cbdb6823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu6sobkmfe26", "content": "CVE-2026-81578 is trending. Hype score 15, currently #5 on cvemon.\n\nAn improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-81578", "creation_timestamp": "2026-08-29T02:16:35.264968Z"}, {"uuid": "e1c6308e-0871-4ee3-8ffd-026e247dfb8c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b72252ec-5bac-471f-9f55-10b24d534b53", "content": "", "creation_timestamp": "2026-08-28T16:00:56.356993Z"}, {"uuid": "57d93eb9-eb38-4552-873d-8f24b76d0547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-papercut-mf-en-ng-met-actief-misbruik-update-onmiddellijk", "content": "", "creation_timestamp": "2026-08-28T16:15:07.946945Z"}, {"uuid": "694349aa-d109-43c7-a77b-466c01f33241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/papercut-security-advisory-av26-858", "content": "", "creation_timestamp": "2026-08-28T20:15:03.694881Z"}, {"uuid": "e107a018-2acd-45a7-9a59-73b3c2224576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "Telegram/_MkvWCyWZJHe2RNbxcbbJ8w73Oq-ZroyWog-I1ehVh_MDUs", "content": "", "creation_timestamp": "2026-08-30T00:00:55.878909Z"}, {"uuid": "211ec5ff-3d1b-4d56-9729-924da719da2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mubp7tzhos2x", "content": "\ud83d\udea8 PaperCut Emergency \u2014 patched already? Patch again.\n\nActive attacks continue against CVE-2026-81578 + CVE-2026-82078. The original fixes were bypassed \u2014 Emergency Patch Release 2 is now required.\n\nstemshop.top/blog/papercu...\n\n#PaperCut #CVE #RCE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T05:52:58.923374Z"}, {"uuid": "65337249-46b4-4fbc-88ef-a6ed1841a39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/CyberSecurityIL/9401", "content": "\u05d7\u05d1\u05e8\u05ea PaperCut \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05e9\u05e0\u05d9 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e0\u05d2\u05d3 \u05e9\u05e8\u05ea\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2026-81578 \u05d5-CVE-2026-82078, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d1\u05e6\u05e2 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e9\u05e0\u05d9 \u05e4\u05d5\u05e8\u05e1\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d4\u05e6\u05dc\u05d9\u05d7\u05d5 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d1\u05db\u05de\u05d4 \u05d3\u05e8\u05db\u05d9\u05dd \u05d0\u05ea \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05d5\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05e1\u05d9\u05d9\u05d1\u05e8 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05db\u05d1\u05e8 \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd, \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u26a0\ufe0f\n\nhttps://t.me/CyberSecurityIL/9401", "creation_timestamp": "2026-08-30T10:00:05.760499Z"}, {"uuid": "37947e3c-3fc9-49f3-9414-1150de2bd3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/CyberSecurityIL/86933", "content": "\u05d7\u05d1\u05e8\u05ea PaperCut \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05e9\u05e0\u05d9 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e0\u05d2\u05d3 \u05e9\u05e8\u05ea\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2026-81578 \u05d5-CVE-2026-82078, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d1\u05e6\u05e2 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e9\u05e0\u05d9 \u05e4\u05d5\u05e8\u05e1\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d4\u05e6\u05dc\u05d9\u05d7\u05d5 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d1\u05db\u05de\u05d4 \u05d3\u05e8\u05db\u05d9\u05dd \u05d0\u05ea \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05d5\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05e1\u05d9\u05d9\u05d1\u05e8 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05db\u05d1\u05e8 \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd, \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u26a0\ufe0f\n\nhttps://t.me/CyberSecurityIL/9401", "creation_timestamp": "2026-08-30T11:00:06.014651Z"}, {"uuid": "10ba58c0-4b5e-4806-8476-38b4669c3c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3mueibpdbtc2c", "content": "We have published our @metasploit-r7.bsky.social exploit for the recent PaperCut MF and NG zero-day (CVE-2026-81578 + CVE-2026-82078) that is being actively exploited in-the-wild. github.com/rapid7/metas...", "creation_timestamp": "2026-08-31T08:26:37.571303Z"}, {"uuid": "4cd8a1e9-3989-43e2-9cfb-80acefbab1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muejnhyutk22", "content": "A PaperCut zero-day (CVE-2026-81578, CVE-2026-82078) is exploited in the wild. Attackers run malicious SQL for RCE, and a Metasploit PoC is now public.\n\n#PaperCut #CVE202682078 #ZeroDay #RCE #InfoSec #Metasploit #SQLi", "creation_timestamp": "2026-08-31T08:51:03.757960Z"}, {"uuid": "0f1363df-bd44-487b-b6e2-444cb47008ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3muemgxnxeo2e", "content": "\u300c\u898b\u305b\u308b\u30da\u30fc\u30b8\u300d\u306e\u8a8d\u53ef\u3060\u3051\u898b\u3066\u3001\u300c\u52d5\u304b\u3059\u90e8\u54c1\u300d\u306e\u8a8d\u53ef\u3092\u898b\u3066\u306d\u3047\u3002\u7384\u95a2\u306e\u672d\u3092\u898b\u3066\u308b\u9593\u306b\u3001\u7ba1\u7406\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u304c\u52d5\u304f\u3002\ud83d\udc8e\n\nPaperCut NG/MF\u3001CVE-2026-81578\uff08\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\uff09\uff0bCVE-2026-82078\u3002\u672a\u8a8d\u8a3cRCE\u306b\u7e4b\u304c\u308b\u9023\u9396\u3002\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u3002\nhttps://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild\n#PaperCut #AuthN", "creation_timestamp": "2026-08-31T09:41:06.523541Z"}, {"uuid": "60352365-81d1-4891-8ad3-15fd41580bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muesk6ynae2g", "content": "PaperCut Issues Second Patch as Bypasses Found \u2014 PaperCut's first emergency patch had bypasses. CVE-2026-81578 (auth bypass, CVSS 8.8) and CVE-2026-82078 (RCE, CVSS 9.4) remain exploitable on EP1 installs. Apply Emer https://0daynews.com/articles/2026-08-29-papercut-second-patch-cve-2026-81578-82078", "creation_timestamp": "2026-08-31T11:30:16.902685Z"}, {"uuid": "610226f9-ab95-4436-8ac9-f81f26b94779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3muf355td2m2t", "content": "PaperCut disclosed two exploited vulnerabilities (CVE-2026-82078, CVE-2026-81578), enabling unauthenticated access to sensitive information and prompting immediate patching and isolation.\n", "creation_timestamp": "2026-08-31T14:04:04.638182Z"}, {"uuid": "a13b22ca-d632-4a14-8054-6624bb09c748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3muf35lje7m2z", "content": "PaperCut disclosed two exploited vulnerabilities (CVE-2026-82078, CVE-2026-81578), enabling unauthenticated access to sensitive information and prompting immediate patching and isolation.\n", "creation_timestamp": "2026-08-31T14:04:18.987939Z"}, {"uuid": "b273a10a-8a18-4ab1-9358-2b91314fde4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3muf362dhve2y", "content": "PaperCut disclosed two exploited vulnerabilities (CVE-2026-82078, CVE-2026-81578), enabling unauthenticated access to sensitive information and prompting immediate patching and isolation.\n", "creation_timestamp": "2026-08-31T14:04:33.596916Z"}, {"uuid": "793cda79-5408-4444-bda2-96d591d2e0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://t.me/information_security_channel/55823", "content": "More Details Emerge on Exploited PaperCut Vulnerabilities\nhttps://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/\n\nPaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.\nThe post More Details Emerge on Exploited PaperCut Vulnerabilities (https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-31T15:00:04.121470Z"}, {"uuid": "702a99d1-10d1-4940-829e-a656e2187981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mufa3liedh2k", "content": "URGENT C-Suite Brief: CVE-2026-81578 active exploitation targets PaperCut NG/MF authentication flaws. Read our executive brief for rapid patch deployment, EDR monitoring, and access controls to safeguard your enterprise perimeter. http://thecybermind.co/4im9", "creation_timestamp": "2026-08-31T15:32:39.758562Z"}, {"uuid": "d1a1fc87-2a68-45e3-9df4-ccc391fa43f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mufa6rvddk2k", "content": "\ud83d\uded1 CVE-2026-81578\nPaperCut NG/MF\nCVSS 8.8 / EPSS 0% / KEV: No\nTL;DR: An improper access control vulnerability exists in the web management interface of PaperCut \u2026\nhttps://cvesentinel.com/report/CVE-2026-81578?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-31T15:34:26.405603Z"}, {"uuid": "3cb41e2c-b5c2-40b6-88d8-db981ee6953e", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f0c2d6c9-3315-46e7-b7f0-478e2eea4b90", "content": "", "creation_timestamp": "2026-08-31T16:00:02.540989Z"}, {"uuid": "e2610103-c943-463c-9f04-528f93063a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-08-31T16:15:03.575588Z"}, {"uuid": "343250b5-c246-4f6a-93e1-4c2c4daa98d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117191056516789304", "content": "PaperCut has made the cut. Two vulnerabilities have been added to the KEV catalogue.\nCISA: CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability\nCVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82078 #CISA #infosec #vulnerability", "creation_timestamp": "2026-08-31T16:26:52.178896Z"}, {"uuid": "0d79a109-2909-4d5b-8ec5-77b13f2218dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mufd5avdyw26", "content": "Critical PaperCut NG/MF flaws (CVE-2026-81578 & -82078) can be chained for remote code execution. #PaperCut #Cybersecurity #RemoteCodeExecution #Vulnerability #KEV #CISA thedailytechfeed.com/critical-pap...", "creation_timestamp": "2026-08-31T16:27:16.598187Z"}, {"uuid": "27820daf-6de0-4dcd-b46f-0edb2f80449e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mufidj37ms2v", "content": "Urgent: patch PaperCut NG/MF\u2014CISA flags CVE-2026-81578/-82078 as exploited. Exchange Online had an Aug 31 incident. DPC watchdog 0x133: inspect drivers. Autopilot prep is Entra-only. Copilot Pages saves answers. +6 more stories, 84 new members", "creation_timestamp": "2026-08-31T18:00:15.323806Z"}, {"uuid": "49b359e6-1ca1-406e-b7b1-5759136e92e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mufllqj2w32l", "content": "More Details Emerge on Exploited PaperCut\u00a0Vulnerabilities\n\nPaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578. The post More Details Emerge on Exploited PaperCut Vulnerabilities appeared first on SecurityWeek .", "creation_timestamp": "2026-08-31T18:58:32.862386Z"}, {"uuid": "ab3716f4-8bbd-4a1b-b2ae-9ca0ea753450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mufpmssttq2s", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-81578", "creation_timestamp": "2026-08-31T20:10:43.318089Z"}, {"uuid": "a83e7afb-ebbd-419d-a385-f1d61917adbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufqb53lj32b", "content": "~Cisa~\nCISA added two actively exploited PaperCut NG/MF flaws to its KEV Catalog.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078\n-\n#CVE202681578 #CVE202682078 #ThreatIntel", "creation_timestamp": "2026-08-31T20:22:05.354166Z"}, {"uuid": "8c117c25-475e-4945-8a42-4ff4bcf83e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufqtzakmc2q", "content": "~Cybergcca~\nPaperCut flaws are exploited in the wild and added to CISA KEV; update affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078\n-\n#CVE202681578 #CVE202682078 #PaperCut #ThreatIntel", "creation_timestamp": "2026-08-31T20:32:38.514742Z"}, {"uuid": "ff55d1a6-dd08-4d9d-b7b0-d9848aae3a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mufxskrknk24", "content": "\ud83d\udccc PaperCut NG and MF Vulnerabilities CVE-2026-81578 and CVE-2026-82078 Exploited in the Wild, Second P... https://www.cyberhub.blog/article/31478-papercut-ng-and-mf-vulnerabilities-cve-2026-81578-and-cve-2026-82078-exploited-in-the-wild-second-patch-released", "creation_timestamp": "2026-08-31T22:37:06.818774Z"}, {"uuid": "1eead945-aa53-41c3-8e71-13c5e1219b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/information_security_channel/55823", "content": "More Details Emerge on Exploited PaperCut Vulnerabilities\nhttps://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/\n\nPaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.\nThe post More Details Emerge on Exploited PaperCut Vulnerabilities (https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-01T00:00:09.485749Z"}, {"uuid": "4ffc1aec-e9b1-4b78-8e34-ec128a38b83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://www.acn.gov.it/portale/w/papercut-rilevato-sfruttamento-in-rete-delle-cve-2026-82078-e-cve-2026-81578", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-82078 e CVE-2026-81578 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nei prodotti PaperCut NG e PaperCut MF, soluzioni software per la gestione e il controllo delle stampe.", "creation_timestamp": "2026-09-01T01:00:34.402587Z"}, {"uuid": "ed0f4706-51ea-4383-92dc-ddc6df594108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mughecxqgb2m", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Aug 31)\n\nCVE-2026-81578 PaperCut NG/MF\u306b\u304a\u3051\u308b\u91cd\u8981\u6a5f\u80fd\u306e\u8a8d\u8a3c\u6b20\u843d\u306e\u8106\u5f31\u6027 \nCVE-2026-82078 PaperCut NG/MF \u306e\u5b89\u5168\u3067\u306a\u3044\u53cd\u5c04\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-01T03:15:28.010871Z"}, {"uuid": "1101afde-8acf-4013-b76c-a78a64481a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mugjx5siqn22", "content": "\ud83d\udd34 PAPERCUT ZERO-DAY CHAIN: CVE-2026-81578 (auth bypass) + CVE-2026-82078 (RCE) actively exploited. Affects all NG/MF versions. Metasploit module PR submitted. CISA KEV listed. Patch immediately. Source: @Rapid7 + @TheHackerNews #Vulnerability", "creation_timestamp": "2026-09-01T04:01:47.440229Z"}, {"uuid": "f7caac84-c697-498a-a588-aaec49fee550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mugsatn4lh2q", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-81578: \u26a0\ufe0f CVE-2026-81578: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-81578-an-improper-access-control-vulnerability-exists", "creation_timestamp": "2026-09-01T06:30:22.794380Z"}, {"uuid": "f76e3e85-7d53-4c16-a9b2-1a7726288f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mugszsy5ri24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-60004: 21 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-62626: 10 interactions\nCVE-2023-28252: 8 interactions\nCVE-2026-81578: 6 interactions\n", "creation_timestamp": "2026-09-01T06:44:21.044498Z"}, {"uuid": "2a2292b9-1703-416f-bc0c-6f60bb5531e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mugvy6pxkm2j", "content": "\ud83d\udccc CVE-2026-81578 - An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific\u00a0conditions, unauthentic... https://www.cyberhub.blog/cves/CVE-2026-81578", "creation_timestamp": "2026-09-01T07:37:07.006620Z"}, {"uuid": "4d466abc-64b4-4029-8390-5511eb8a0e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/427", "content": "Exploit module for the recent PaperCut MF/NG 0day (CVE-2026-81578 + CVE-2026-82078)\n\nModule supports both MF and NG editions, and all supported product versions 26.x, 25.x, 24.x. Bypasses vendor emergency patch v1. Emergency patch v2 successfully remediates the chain. Module also has platform agnostic Java payload support (and that will be in-memory on 26.x targets), along with OS command based payloads.\n\nBlog: https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-01T08:00:05.643390Z"}, {"uuid": "acb4c62c-b598-44ce-970b-b6b217b6ae57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/guardingpearsof.bsky.social/post/3mugxsemhog2f", "content": "Two vulnerabilities in PaperCut NG and MF print management software are now being used by attackers in data theft campaigns.\nPaperCut software is used by millions of people across thousands of organizations.\nThe flaws are tracked as CVE-2026-81578 and CVE-2026-82078.\n", "creation_timestamp": "2026-09-01T08:09:40.266164Z"}, {"uuid": "b5adf070-7e0f-411f-adaf-bdea2c7c5262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://t.me/information_security_channel/55830", "content": "PaperCut Exploitation Escalates to Active Intrusions\nhttps://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/\n\nCISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog.\nThe post PaperCut Exploitation Escalates to Active Intrusions (https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-01T10:00:03.805795Z"}, {"uuid": "d1599221-e6be-4f4d-8e70-0abbffa8f26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/117195454031457641", "content": "UmbrielAI revoluciona la ciberseguridad con IA avanzada para detecci\u00f3n en tiempo real, mientras nuevos m\u00e9todos aut\u00f3nomos superan barreras de autenticaci\u00f3n en pruebas de seguridad. Se alerta sobre vulnerabilidad cr\u00edtica en PaperCut, ola de ciberataques impulsados por IA en Latinoam\u00e9rica, y se destacan herramientas clave como Entra ID y Cloudflare One para proteger infraestructuras. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff01/09/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\ude80 UMBRIELAI: INNOVACI\u00d3N EN SEGURIDAD INFORM\u00c1TICA Y MODELOS DE LENGUAJE AVANZADOS\nUmbrielAI presenta una nueva era en investigaci\u00f3n y desarrollo de modelos de lenguaje (LLM) aplicados a la ciberseguridad. Su enfoque combina IA avanzada con pipelines automatizados para detectar y mitigar amenazas en tiempo real, ampliando el potencial de defensa contra ataques sofisticados. Esta iniciativa promete transformar la forma en que las organizaciones protegen sus sistemas mediante inteligencia artificial. Descubre m\u00e1s sobre esta revoluci\u00f3n en IA y seguridad \ud83d\udc49 https://djar.co/4VX9\n\ud83d\udd10 NOAUTH, NO PROBLEM: AUTENTICACI\u00d3N EN PRUEBAS DE SEGURIDAD\nLa autenticaci\u00f3n com\u00fanmente limita la capacidad para realizar pruebas de seguridad exhaustivas. Sin embargo, agentes aut\u00f3nomos han desarrollado m\u00e9todos para navegar flujos complejos de autenticaci\u00f3n, permitiendo descubrir vulnerabilidades cr\u00edticas que pasan desapercibidas en pruebas convencionales. Este avance mejora significativamente la cobertura y efectividad en la detecci\u00f3n de brechas de seguridad. Conoce c\u00f3mo mejorar tus evaluaciones de seguridad aqu\u00ed \ud83d\udc49 https://djar.co/4EMqG0\n\ud83d\udee0 INVESTIGACI\u00d3N EN BUGS Y EXPLOITS DESDE CALIFORNIA\nUna reciente investigaci\u00f3n focalizada en bugs, exploits y an\u00e1lisis profundos ha sido publicada desde California, aportando datos valiosos para la comunidad de seguridad inform\u00e1tica. Esta investigaci\u00f3n contribuye a la comprensi\u00f3n y mitigaci\u00f3n de amenazas emergentes, facilitando la creaci\u00f3n de soluciones m\u00e1s robustas. Explora los hallazgos y mantente actualizado con los \u00faltimos descubrimientos \ud83d\udc49 https://djar.co/daT3\n\u26a0\ufe0f CVE-2026-81578: VULNERABILIDAD CR\u00cdTICA EN PAPERCUT NG/MF\nSe ha identificado una cadena de ejecuci\u00f3n remota de c\u00f3digo no autenticada en PaperCut NG/MF, clasificada con una gravedad CVSS de 9.4. Esta vulnerabilidad puede ser explotada para comprometer sistemas sin necesidad de autenticaci\u00f3n previa, representando un riesgo alto para empresas que utilizan esta plataforma. Es fundamental aplicar los parches correspondientes y revisar la seguridad de estos sistemas cuanto antes. Consulta detalles t\u00e9cnicos y recomendaciones aqu\u00ed \ud83d\udc49 https://djar.co/hHBsNx\n\ud83d\udee1 ALERTA DE 116 EMPRESAS SOBRE OLA DE CIBERATAQUES POTENCIADOS POR IA\nUn consorcio de 116 empresas l\u00edderes en inteligencia artificial ha emitido una advertencia sobre un inminente aumento de ciberataques impulsados por IA que afectar\u00e1n a Ecuador y Latinoam\u00e9rica. Recomiendan fortalecer las defensas cibern\u00e9ticas mediante estrategias proactivas y capacitaci\u00f3n especializada para anticipar estas amenazas avanzadas. Conoce c\u00f3mo prepararte ante esta ola creciente de ataques inteligentes \ud83d\udc49 https://djar.co/th6tLa\n\ud83d\udd11 ASEGURANDO LA ADMINISTRACI\u00d3N DE ENTRA ID: PRIORIDAD TIER 0\nLa administraci\u00f3n segura de Entra ID requiere identificar, proteger y manejar con rigor las identidades privilegiadas de nivel Tier 0. Aplicar las mejores pr\u00e1cticas en esta \u00e1rea es crucial para evitar accesos no autorizados que podr\u00edan comprometer toda la infraestructura. Este recurso ofrece una gu\u00eda detallada para reforzar la seguridad en la gesti\u00f3n de identidades cr\u00edticas. Aprende a proteger tu entorno con estas recomendaciones \ud83d\udc49 https://djar.co/TOl2\n\u2601\ufe0f CLOUDFLARE ONE: PLATAFORMA SASE \u00c1GIL PARA SEGURIDAD Y CONECTIVIDAD\nCloudflare One se presenta como una plataforma SASE dise\u00f1ada para proporcionar conectividad segura y protecci\u00f3n integral a la fuerza laboral, agentes de IA e infraestructuras. Facilita la adopci\u00f3n segura de tecnolog\u00edas IA y el acceso Zero Trust, permitiendo a las organizaciones operar con mayor agilidad y resistencia frente a amenazas cibern\u00e9ticas modernas. Descubre c\u00f3mo Cloudflare One transforma la seguridad empresarial \ud83d\udc49 https://djar.co/nTh7DR", "creation_timestamp": "2026-09-01T11:05:12.961981Z"}, {"uuid": "b5e2c225-aa01-4f56-9008-4ec76353b9b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3muhdade3l22h", "content": "\u3010Forsmile \u65b0\u7740\u8a18\u4e8b\ud83d\udcbb\u3011\n\u3010\u7dca\u6025\u3011PaperCut NG/MF CVE-2026-81578\uff1a\u7dca\u6025\u30d1\u30c3\u30c1Release 3\u3092\u4eca\u3059\u3050\u9069\u7528 \u2014 \u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u306e\u8a8d\u8a3c\u56de\u907f\u304b\u3089RCE\u3078\u306e\u9023\u9396\n\nPaperCut NG/MF \u306e CVE-2026-81578 \u3068 CVE-2026-82078\u3002\u4eca\u3059\u3050\u7ba1\u7406\u753b\u9762\u3078\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5236\u9650\u3057\u3001\u7dca\u6025\u30d1\u30c3\u30c1 Release 3 \u3092\u9069\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u30022\u3064\u3092\u9023\u9396\u3055\u305b\u305f\u653b\u6483\u304c\u5b9f\u969b\u306b\u767a\u751f\u3057\u30012026\u5e748\u670831\u65e5\u306bCISA\u306e\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u30ea\u30b9\u30c8\u3078\u8ffd\u52a0\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u3067\u306f\u5b89\u5168\u304b\u5224\u65ad\u3067\u304d\u307e\u305b\u3093\u3002\nforsmile.jp/articles/pap...", "creation_timestamp": "2026-09-01T11:34:19.495083Z"}, {"uuid": "312420f2-6c83-43cc-b1cb-af2a4f4af7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mui4zgl2ix2f", "content": "\ud83d\udea8 CVSS 9.8. Unauthenticated. PaperCut.\n\nCVE-2026-81578.\n\nhttps://www.yazoul.net/news/article/critical-gitea-rce-actively-exploited-as-reported-attack-drops-miner-like-payloa/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-09-01T19:15:45.171673Z"}, {"uuid": "59709451-0514-4012-8584-530d8365ec3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117197511429263890", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\nDashboard World Map view stats:  https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-81578%2B&tag=cve-2026-82078%2B&data_set=count&scale=log&auto_update=on\nDaily IP data now in our Vulnerable HTTP reporting, tagged 'cve-2026-82078' & 'cve-2026-81578': https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nTree map view: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-81578%2B&tag=cve-2026-82078%2B&data_set=count&scale=log&auto_update=on\nNVD entry: https://nvd.nist.gov/vuln/detail/cve-2026-82078https://nvd.nist.gov/vuln/detail/cve-2026-81578\nPatch info: https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ \nMake sure to install Emergency Patch (Release 2) - but assume compromise.\nDetection based on Nuclei template by @darses  - https://github.com/projectdiscovery/nuclei-templates/pull/17025\nBackground on PaperCut incidents: https://www.huntress.com/blog/papercut-actively-exploited", "creation_timestamp": "2026-09-01T19:48:27.332975Z"}, {"uuid": "a48315ab-8dbc-49f3-bbeb-021898a7d1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui6v2qfxs2s", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T19:49:09.623482Z"}, {"uuid": "39bc078c-c874-460d-9079-1dfac4416fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui6v5g5522s", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T19:49:10.652695Z"}, {"uuid": "f2615c29-d4c0-4f8b-907b-d7b6ee75bf13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui6v5g64c2s", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T19:49:11.642099Z"}, {"uuid": "a833f155-f3d9-4a9b-a0df-8a85ee3e81b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui7xbnw622t", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T20:08:17.710932Z"}, {"uuid": "801a73f6-3f35-44db-b981-63ffae69782e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui7x6xtbs2t", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T20:08:15.248108Z"}, {"uuid": "1ae341b3-20a0-4573-8815-fc47fe6f2301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui7xbnv6s2t", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T20:08:16.694036Z"}, {"uuid": "ee06a398-3065-4470-b6ef-f802081c1e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3muibmyveke2l", "content": "PaperCut NG/MF: Critical Authentication Bypass and RCE Chain CVE-2026-81578 & CVE-2026-82078\n\nhttps://horizon3.ai/attack-research/vulnerabilities/cve-2026-81578-cve-2026-82078\nhttps://flagthis.com/tldr/6834\n\n##RCE ##ZeroDay ##PaperCut ##AuthenticationBypass ##CyberSecurity", "creation_timestamp": "2026-09-01T20:38:17.010098Z"}, {"uuid": "cbea7ae9-6e69-4054-b21b-b3c7f711a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/P0x3k_1N73LL1G3NC3/427", "content": "Exploit module for the recent PaperCut MF/NG 0day (CVE-2026-81578 + CVE-2026-82078)\n\nModule supports both MF and NG editions, and all supported product versions 26.x, 25.x, 24.x. Bypasses vendor emergency patch v1. Emergency patch v2 successfully remediates the chain. Module also has platform agnostic Java payload support (and that will be in-memory on 26.x targets), along with OS command based payloads.\n\nBlog: https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-02T01:05:08.890830Z"}, {"uuid": "06fff05e-e6fe-481e-8893-d4c45c17cfa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3muitmistu42r", "content": "\ud83d\udce2 Deux zero-days PaperCut NG/MF exploit\u00e9s activement : second patch d'urgence publi\u00e9\n\nDeux CVE ont \u00e9t\u00e9 officiellement attribu\u00e9es : CVE-2026-81578 : Contournement d'authentification de haute s\u00e9v\u00e9rit\u00e9 permettant \u00e0 un attaquant distant\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#PaperCut #ZeroDay #Cyberveille", "creation_timestamp": "2026-09-02T02:00:07.124885Z"}, {"uuid": "4fed70ad-4c01-4326-8b54-5e78ed65eeab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://t.me/S_E_Reborn/6578", "content": "PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u044c\u044e PaperCut NG \u0438 MF \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u043d\u0435\u0435 PaperCut \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 PaperCut NG/MF 25 \u0438 26.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u043a\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2026-82078 \u0438 CVE-2026-81578, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nCVE-2026-81578 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PaperCut NG/MF.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0431\u044d\u043a\u044d\u043d\u0434\u0435 \u0434\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-82078 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 PaperCut.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u0438\u0445 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\u00a0\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 Java, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0443\u0442\u0438 \u043a \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 PaperCut.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u0440\u0435\u043b\u0438\u0437 2, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Huntress \u0438 watchTowr.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\nHuntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043b\u043e\u0433\u0430\u0445 PaperCut \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0444\u0430\u0439\u043b\u044b Java \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .class \u0432 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0441\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0435\u0436\u0434\u0443 PaperCut \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Huntress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430 \u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nHuntress \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432 PaperCut.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 2 \u0434\u043b\u044f PaperCut NG \u0438 MF \u0432\u0435\u0440\u0441\u0438\u0439 24, 25 \u0438 26 \u043d\u0430 Windows, Linux \u0438 macOS. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e 23 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u043d\u0435 \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432.\n\nPaperCut \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 pc-app.exe \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043b\u0438 \u0443\u0441\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b server.log, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 server.log.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.", "creation_timestamp": "2026-09-02T06:00:05.244102Z"}, {"uuid": "0d517675-0ad9-4c60-a341-da602ab5a2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117200799002428660", "content": "Huntress logged confirmed attacks against at least two customers.\nSYSTEM NOTE: WatchTowr did not make this worse. The situation was already worse. WatchTowr merely filed a report.\nApply PaperCut's emergency patches for both CVE-2026-81578 and CVE-2026-82078 immediately, and check for indicators of compromise dating back to August 26.\nReward: You've received a Duplicate Incident Ticket \u2014 it's the same as the first one but somehow more urgent.\n#PaperCut #ZeroDay #CVE #CyberSecurity (2/2)", "creation_timestamp": "2026-09-02T09:49:05.824608Z"}, {"uuid": "c21609a6-8d77-4cc4-81e4-bb2691c0e129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3muknjdbjfy2v", "content": "CVSS 9.8. Unauthenticated. PaperCut.\n\nYour print server could be an attacker's entry point.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-81578-papercut-mf-ng-exploited-unauth-config-change-poc/\n\nby Yazoul AI #InfoSec #ThreatIntel", "creation_timestamp": "2026-09-02T19:16:17.877839Z"}, {"uuid": "bacca5e6-d544-4b7c-99f9-6d995bf166bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/eudatabriefly.bsky.social/post/3muqy5wpzam2c", "content": "Threat actors exploit PaperCut CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts in U.S. and Europe education targets.\n", "creation_timestamp": "2026-09-05T07:42:45.842132Z"}, {"uuid": "8b3c0c29-f65d-42c8-bdb8-da86a3c3bcef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3muqy6byfkj2g", "content": "Threat actors exploit PaperCut CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts in U.S. and Europe education targets.\n", "creation_timestamp": "2026-09-05T07:42:56.957527Z"}, {"uuid": "446d319a-2d35-43d4-82e1-70b52925b410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3muqy6ldnmn2n", "content": "Threat actors exploit PaperCut CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts in U.S. and Europe education targets.\n", "creation_timestamp": "2026-09-05T07:43:07.167540Z"}, {"uuid": "05b74411-42ef-431f-a022-e39699b9b799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "content": "Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe.\n\nThe Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 \u2013 an authentication bypass and remote code execution chain \u2013 to conduct command execution and reconnaissance, as well as", "creation_timestamp": "2026-09-05T10:00:47.443196Z"}, {"uuid": "c37895b9-ae99-4a9b-856e-e2097b3a0bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3murayiciq72g", "content": "\ud83e\udd16 PaperCut auth bypass + RCE chain (CVE-2026-81578, CVE-2026-82078) exploited in the wild against schools in the US/Europe for credential theft, per Arctic Wolf. Patch now.\nhttps://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "creation_timestamp": "2026-09-05T10:20:45.864069Z"}, {"uuid": "53a08b5c-a244-462f-89df-ecd9f121cd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3murbeqp7bq2x", "content": "PaperCut\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3068RCE\u306e\u8106\u5f31\u6027\uff08CVE-2026-81578, CVE-2026-82078\uff09\u304c\u3042\u308a\u3001\u6559\u80b2\u6a5f\u95a2\u3092\u6a19\u7684\u3068\u3057\u305f\u653b\u6483\u3067\u8a8d\u8a3c\u60c5\u5831\u7a83\u53d6\u3084\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-05T10:27:38.194132Z"}, {"uuid": "0e7c1279-e81f-407a-ad7a-8471dee9ec02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3murdwozqrn27", "content": "Two chained PaperCut flaws (CVE-2026-81578, CVE-2026-82078) are hitting US/EU schools for credential theft, per Arctic Wolf \u2014 both on CISA KEV. Restrict internet-facing servers now. https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "creation_timestamp": "2026-09-05T11:13:26.925775Z"}, {"uuid": "441ba943-c40a-4c52-b261-b6b3a9189fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "Telegram/EiuMVLgHOwo_5_btOtFacIrZAPOQgSEh20v4-AQl3xsbOw", "content": "", "creation_timestamp": "2026-09-05T13:00:05.271303Z"}, {"uuid": "21533382-5fd3-40a1-a9f6-9c76bce13208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/topkeyshop.bsky.social/post/3mutelevf4b2f", "content": "PaperCut zero-day alert: CVE-2026-82078 (CVSS 9.4) chains with CVE-2026-81578 for pre-auth RCE on NG/MF servers \u2014 and it\u2019s already being exploited. Patch to 25.1.2 or 26.0.1 now. Top Key Shop breaks down the emergency fix in the linked guide \ud83d\udea8", "creation_timestamp": "2026-09-06T06:30:21.676423Z"}, {"uuid": "9d86eb7c-a97c-4393-a75d-c7bb2f227be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv5bvefdc26", "content": "\ud83d\udd34 PaperCut attacks are moving beyond RCE\n\nAttackers exploiting CVE-2026-81578 and CVE-2026-82078 are now stealing credentials, targeting SAM/LDAP secrets and using compromised print servers\n\nstemshop.top/blog/papercu...\n\n#CVE #CVE202681578 #CVE202682078 #PaperCut #CredentialTheft #RCE #CyberSecurity", "creation_timestamp": "2026-09-06T23:25:09.694220Z"}, {"uuid": "254e4ecc-ec0b-4551-baf1-6cf72f67fece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3muvyg4lur72a", "content": "Twee PaperCut-kwetsbaarheden vormen een groeiende bedreiging sinds eind augustus\n\nSinds 27 augustus 2026 worden twee kritieke kwetsbaarheden in PaperCut-servers actief uitgebuit. De kwetsbaarheden, ge\u00efdentificeerd als CVE-2026-81578 en CVE-2026-82078, werden op 28 augustus 2026 toegewezen en...", "creation_timestamp": "2026-09-07T07:30:38.678303Z"}, {"uuid": "f3acc14a-a460-4a43-a9b7-63fc836e759b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3muxo5ehxce2t", "content": "Threat actors are exploiting PaperCut flaws (CVE-2026-81578 & CVE-2026-82078) to target US & European educational institutions, enabling credential theft and remote code execution.", "creation_timestamp": "2026-09-07T23:32:06.546624Z"}, {"uuid": "eabb313d-6912-450f-aba9-e1110d8454f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb", "content": "{\"aliases\": [], \"arch\": \"java, cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass in PaperCut NG and MF. A crafted Apache Tapestry\\n          complex-direct request invokes privileged ConfigEditor components through the public Home\\n          page. On version 26, the module reconfigures external user lookup to use an H2 JDBC URL whose\\n          initialization SQL evaluates Groovy code. On versions 24 and 25, it uses a bundled Derby\\n          procedure to write a temporary Groovy bootstrap class to the application classpath, then loads\\n          it as a database driver. The Java target serves an executable payload JAR and a generic\\n          memory-backed JAR loader over HTTP. Its payload classes and resources remain in memory; however,\\n          versions 24 and 25 still require the temporary Derby bootstrap class. The command targets execute\\n          a Windows or Linux command payload directly.\\n\\n          This module was successfully tested against:\\n          * PaperCut MF 26.0.4 (Build 76494) <-- emergency patch v1\\n          * PaperCut NG 26.0.4 (Build 76495) <-- emergency patch v1\\n          * PaperCut NG 26.0.3 (Build 76225)\\n          * PaperCut NG 25.0.11 (Build 75758)\\n          * PaperCut NG 24.1.9 (Build 73376)\", \"disclosure_date\": \"2026-08-27\", \"fullname\": \"exploit/multi/http/papercut_ng_external_user_lookup_rce\", \"is_install_path\": true, \"mod_time\": \"2026-09-02 10:28:21 +0000\", \"name\": \"PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb\", \"platform\": \"Java,Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/papercut_ng_external_user_lookup_rce\", \"references\": [\"CVE-2026-81578\", \"CVE-2026-82078\", \"URL-https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/\", \"URL-https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/\"], \"rport\": 9191, \"session_types\": false, \"targets\": [\"Java\", \"Windows Command\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:07.096562Z"}, {"uuid": "8906e527-9ba1-4f3f-960b-fa3bafaacbfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/jhuntinfosec.com/post/3mv3rjbzv722j", "content": "Hundreds of AI agents downloaded the advisory, the pre and post patch versions of the software, and built a lab to test the attack. Then went live against hundreds of identified victims vulnerable to CVE-2026-81578 and CVE-2026-82078", "creation_timestamp": "2026-09-09T14:43:07.192226Z"}, {"uuid": "7a6328ef-c59e-43ec-a8c0-90fc0dcd6b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mv3ui2vfzt2o", "content": "The AI swarm that breached 440 PaperCut servers\u00a0worldwide\n\nGreyNoise uncovered an AI-driven PaperCut attack that compromised 440 servers across 395 organizations in 48 countries using CVE-2026-81578 and CVE-2026-82078...\n\nhttps://thecybersecguru.com/news/ai-swarm-papercut-attack-440-servers/", "creation_timestamp": "2026-09-09T15:36:08.987865Z"}, {"uuid": "9eea8e18-a1ff-4458-818e-1c2cebb8441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dcoamsb2o", "content": "~Arcticwolf~\nChained flaws enable pre-auth SYSTEM RCE; patch immediately.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, Udydn[.]class\n-\n#CVE202681578 #CVE202682078 #ThreatIntel", "creation_timestamp": "2026-09-09T20:01:39.989755Z"}, {"uuid": "a152d29a-ca10-4e39-b432-40a102c7a6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mv67ldjp372g", "content": "\ud83d\udce2 Exploitation IA \u00e0 grande \u00e9chelle de PaperCut via CVE-2026-81578 et CVE-2026-82078\n\nCet article pr\u00e9sente l'analyse technique d'une campagne d'exploitation active de serveurs PaperCut expos\u00e9s sur Internet, utilisant les\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#PaperCut #AIAssistedExploitation #Cyberveille", "creation_timestamp": "2026-09-10T14:00:07.810166Z"}, {"uuid": "e5f36443-52d4-4e9b-8182-588451ba7eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv76j2vg5s2l", "content": "Patch internet-facing PaperCut NG/MF now \u2014 CVE-2026-81578 + CVE-2026-82078 chain for pre-auth RCE, already used to breach 395 organisations worldwide. https://bleepingcomputer.com/news/security/ai-powered-attack-exploited-papercut-flaws-to-hack-395-organizations", "creation_timestamp": "2026-09-10T23:13:37.202535Z"}, {"uuid": "464d877a-8bcb-483a-af29-bd52fa13f00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv7zabdnmq2x", "content": "Just another Tuesday in IT, where educational infrastructure across the UK, the US, and Europe gets trampled by hundreds of automated AI agents exploiting PaperCut NG/MF. Chaining CVE-2026-81578 authentication bypass with CVE-2026-82078 remote execution, these busy little bots br...\n\nRead full story", "creation_timestamp": "2026-09-11T07:11:52.783978Z"}, {"uuid": "8654f190-800e-4bd7-a6c7-b186501718af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117251586510013041", "content": "PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam", "creation_timestamp": "2026-09-11T09:00:26.575897Z"}, {"uuid": "398cdfab-a48f-4932-bdad-42c3eaa5f912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mva7cgma652y", "content": "CRITICAL PaperCut NG/MF zero-days (CVE-2026-82078, CVE-2026-81578) exploited by AI-powered attacks. Remote code exec, credential theft, & domain admin access in 48 countries. Patch now: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #ZeroDa...", "creation_timestamp": "2026-09-11T09:00:29.301357Z"}, {"uuid": "12def0f2-8464-4b13-ae0e-179ead9d6af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvagkiuzhw2l", "content": "PaperCut users on an emergency patch: move to MR 26.0.5/25.0.13/24.1.10 now. CVE-2026-81578/82078 are under active exploitation hitting 395+ orgs. https://thehackernews.com/2026/09/papercut-replaces-emergency-patches.html", "creation_timestamp": "2026-09-11T11:10:14.865681Z"}, {"uuid": "c6c632a3-08f8-4250-ae14-774c9625cfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/true_secator/8602", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PaperCut \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 GreyNoise, \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0418\u0418 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043e\u0442\u0435\u043d \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-82078 \u0438 CVE-2026-81578, \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b 27 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043a\u0430\u043a O-day \u0438\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b\u00a0\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0432 WatchTowr \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u043a\u0440\u0443\u0433 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441\u0442\u043e\u044f\u0442 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 GreyNoise, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0418\u0418 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u0440\u043e\u0442\u0438\u0432 440 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 PaperCut NG/MF.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PaperCut \u0432 395 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0432 48 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0438 \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0415\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043d\u0435\u0441\u0442\u0438 \u043a \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u043e\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 28 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u043e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0418\u0418 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b \u0438 \u0434\u0430\u0436\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b.\n\n\u0423\u0441\u043f\u0435\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0431\u044b\u043b \u043d\u0435\u0440\u0430\u0432\u043d\u043e\u043c\u0435\u0440\u043d\u044b\u043c \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0434\u043e\u043c\u0435\u043d\u043e\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043b\u0438\u0448\u044c \u0432 12 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d \u043b\u0438 \u044d\u0442\u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0430\u043c, \u0438\u043b\u0438 \u0436\u0435 \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0446\u0435\u043b\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0443\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438: \u0441\u0431\u043e\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 LSASS \u0441 \u0445\u043e\u0441\u0442\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u043b\u0435\u043d\u0430\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a NoPac \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0433\u0440\u0443\u043f\u043f\u0443 Domain Admins, \u0435\u0441\u043b\u0438 \u0445\u043e\u0441\u0442 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 280 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445, \u043f\u043e\u0445\u0438\u0442\u0438\u043b\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e 137 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 12 \u0441\u043b\u0443\u0447\u0430\u044f\u0445.\n\n\u0418\u0437 440 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 204 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0438\u0437 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u0437 \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438/\u0443\u0441\u043b\u0443\u0433, \u043d\u0435\u0434\u0432\u0438\u0436\u0438\u043c\u043e\u0441\u0442\u0438/\u0433\u043e\u0441\u0442\u0438\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0418\u0422/MSP, \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430/\u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433.", "creation_timestamp": "2026-09-11T16:00:06.839155Z"}, {"uuid": "5811b843-5143-47e6-8535-4d085baf5ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117258905363792667", "content": "We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @greynoise.  IP data in our Compromised Website reporting for 2026-09-11, tagged  'papercut-compromise'.\nDashboard Tree Map stats: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=other_value&day=2026-09-11&source=compromised_iot&source=compromised_website&source=compromised_website6&tag=papercut-compromise&data_set=count&scale=log&auto_update=on\nCompromised Website Report: https://www.shadowserver.org/what-we-do/network-reporting/compromised-website-report/\nThank you to @greynoise for the share! Background with info about the AI-orchestrated campaign behind the compromises (includes IOCs): https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf", "creation_timestamp": "2026-09-12T16:01:44.290260Z"}, {"uuid": "47662b68-4b65-4dcc-9529-5c46f0042b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvdhexfqhc2q", "content": "We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @greynoise.io. IP data in our Compromised Website reporting for 2026-09-11, tagged  'papercut-compromise'.\n\nDashboard Tree Map stats: dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-12T16:03:05.887839Z"}, {"uuid": "71e479d6-2da3-4399-b6b2-d7f1dac6c88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvdhezufzs2q", "content": "We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @greynoise.io. IP data in our Compromised Website reporting for 2026-09-11, tagged  'papercut-compromise'.\n\nDashboard Tree Map stats: dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-12T16:03:06.396865Z"}, {"uuid": "a133905e-fbfe-4849-a34f-28b84f578f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvekgmd3k72x", "content": "PaperCut SMR replaces all emergency patches for CVE-2026-81578 and CVE-2026-82078. AI-assisted attacks are active against hundreds of orgs\u2026 https://0daynews.com/articles/2026-09-11-papercut-smr-ai-attacks/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1732", "creation_timestamp": "2026-09-13T02:30:18.651431Z"}, {"uuid": "e206a8ba-5d96-4c0a-b3f5-7785a9edadf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvesvpak4y2d", "content": "Daily IT Security Digest \u2014 2026-09-13\norganizational fleets. [CTI.FYI](https://cti.fyi)\n\n5. **PaperCut NG/MF Hit by Actively Exploited Critical Zero-Days**\n   PaperCut NG and MF printing management software was struck by critical zero-day vulnerabilities (CVE-2026-82078, CVE-2026-81578) that enable", "creation_timestamp": "2026-09-13T05:01:55.291491Z"}, {"uuid": "805f7a29-efd1-45b6-a9b8-05d0bcd318e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mveym7orcd2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 29 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85102: 10 interactions\nCVE-2026-85103: 10 interactions\nCVE-2026-81578: 9 interactions\n", "creation_timestamp": "2026-09-13T06:43:59.005182Z"}, {"uuid": "b28b7406-a7ff-4c3c-8cf7-4e5b2c847431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvguq67rbw24", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-81578: An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG\nCVSS 9.8 \u00b7 EPSS 1.6% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-81578\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T00:39:56.115364Z"}, {"uuid": "d1a7799f-a9d6-43c7-b530-6e5f7f562753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhqtgk4hw2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-81578: An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-81578\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T09:02:49.859666Z"}, {"uuid": "fe16debc-1ea4-47de-a8ad-ab760e3a732d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhul3koyv2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-81578: An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-81578\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T10:09:45.356468Z"}, {"uuid": "43381614-24d3-4e67-903f-734f48eeba55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhy27asa52t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-81578: An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-81578\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T11:11:53.423142Z"}, {"uuid": "3a25250e-23e2-44ae-8f12-f687604834e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvicpkan5i2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-81578: An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-81578\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T14:22:46.993027Z"}, {"uuid": "af142d88-f98c-40a5-987a-20b99c8e89f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtv6h2kl2g", "content": "Daily IT Security Digest \u2014 2026-09-15\n# Daily IT Security Digest \u2014 2026-09-15\n\n## 1. PaperCut NG/MF Zero-Days Actively Exploited (CRITICAL)\n\nMultiple critical zero-day vulnerabilities (CVE-2026-82078, CVE-2026-81578) have been discovered in PaperCut NG and MF printing management software. Attackers", "creation_timestamp": "2026-09-15T05:02:49.622725Z"}, {"uuid": "3cd646c5-88b1-4a8c-a9cd-b7858c44ca60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81572", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvk6rmmcumg2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-091\nTRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities\nCVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576\n\nThe TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several [\u2026]", "creation_timestamp": "2026-09-15T08:17:47.531206Z"}, {"uuid": "2835f4c2-ab82-40cd-9bba-d527de7e0caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81573", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvk6rmmcumg2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-091\nTRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities\nCVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576\n\nThe TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several [\u2026]", "creation_timestamp": "2026-09-15T08:17:47.582090Z"}, {"uuid": "9bcc0073-6bed-421b-b82b-a189dd6b473a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81574", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvk6rmmcumg2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-091\nTRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities\nCVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576\n\nThe TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several [\u2026]", "creation_timestamp": "2026-09-15T08:17:47.631181Z"}, {"uuid": "915e9d3e-32d0-4ac6-83eb-12651f7095fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81575", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvk6rmmcumg2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-091\nTRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities\nCVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576\n\nThe TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several [\u2026]", "creation_timestamp": "2026-09-15T08:17:47.684187Z"}, {"uuid": "7a840974-e8c5-41b6-8c1f-c057bb11e741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81576", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvk6rmmcumg2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-091\nTRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities\nCVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576\n\nThe TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several [\u2026]", "creation_timestamp": "2026-09-15T08:17:47.726567Z"}, {"uuid": "60783f57-4f5a-4903-b133-b64968aa2fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvmedoqxog2w", "content": "Daily IT Security Digest \u2014 2026-09-16\nSEG should apply the patch immediately.\nSource: [OffSeq](https://infosec.exchange/@offseq/117274235646627417)\n\n## 3. PaperCut NG/MF Critical Zero-Days Impacting 440+ Deployments\n\nMultiple critical zero-day vulnerabilities (CVE-2026-82078, CVE-2026-81578) in", "creation_timestamp": "2026-09-16T05:02:42.781157Z"}, {"uuid": "4053255d-ca2a-434e-80a1-4963f196ab83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvousudlml25", "content": "Daily IT Security Digest \u2014 2026-09-17\nvulnerabilities (CVE-2026-82078, CVE-2026-81578) in PaperCut NG/MF are being exploited in AI-driven attacks, enabling remote code execution, credential theft, and domain administrator escalation. Over 440 deployments have reportedly been affected. Organizations", "creation_timestamp": "2026-09-17T05:02:44.333284Z"}, {"uuid": "528f9ed3-d369-4340-9675-2e82608b803b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44347", "content": "Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities\n\nThreat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe.\n\nThe Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 \u2013 an authentication bypass and remote code execution chain \u2013 to conduct command execution and reconnaissance, as well as\nhttps://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "creation_timestamp": "2026-09-18T12:00:04.769221Z"}, {"uuid": "97813d7a-a926-4cf2-99d6-166774909532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwfdlfbewk22", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date August 31, 2026\n\nCVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability \nCVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability", "creation_timestamp": "2026-09-26T03:25:36.716819Z"}, {"uuid": "97cfb8ef-695e-4d1e-aace-3596bb63715c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwfdople7k22", "content": "\u5370\u5237\u7ba1\u7406\u30bd\u30d5\u30c8\u300cPaperCut NG/MF\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u60aa\u7528\u3082\u78ba\u8a8d\n\nPaperCut Software\u304c\u63d0\u4f9b\u3059\u308b\u5370\u5237\u7ba1\u7406\u30bd\u30d5\u30c8\u300cPaperCut NG\u300d\u300cPaperCut MF\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u6ce8\u610f\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670827\u65e5\u3001\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u305d\u306e\u5f8c\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u30662\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u5fdc\u3057\u305f\u3002\u5229\u7528\u8005\u306e\u74b0\u5883\u306b\u304a\u3044\u3066\u4fb5\u5bb3\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u300cCVE-2026-81578\u300d\u306f\u3001\u30a6\u30a7\u30d6\u7ba1\u7406\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306b\u5224\u660e\u3057\u305f\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u7279\u5b9a\u6761\u4ef6\u4e0b\u306b\u304a\u3044\u3066\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u7ba1\u7406\u6a5f\u80fd\u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u51e6...", "creation_timestamp": "2026-09-26T03:27:27.908496Z"}, {"uuid": "6be83ea2-3a88-4e92-9c49-0c8437942f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwff6olhxk22", "content": "\u7c73\u56fd CISA \u304c\u3001\u60aa\u7528\u3055\u308c\u305f\u65e2\u77e5\u306e\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b PaperCut NG/MF \u306e\u6b20\u9665\u3092\u8ffd\u52a0\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001 \u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0 \u306b\u4ee5\u4e0b\u306e\u8106\u5f31\u6027 \u3092\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-81578  \uff08CVSS\u30b9\u30b3\u30a28.8\uff09PaperCut NG/MF\u306b\u304a\u3051\u308b\u91cd\u8981\u6a5f\u80fd\u306e\u8a8d\u8a3c\u6b20\u843d\u306e\u8106\u5f31\u6027 \nCVE-2026-82078  \uff08CVSS\u30b9\u30b3\u30a29.4\uff09PaperCut NG/MF\u306e\u5b89\u5168\u3067\u306a\u3044\u30ea\u30d5\u30ec\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027", "creation_timestamp": "2026-09-26T03:54:17.398236Z"}, {"uuid": "919b87d8-f172-4d7b-9f68-0e9aaf865d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mwia73wqiz24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-94127: 29 interactions\nCVE-2026-86296: 25 interactions\nCVE-2026-87902: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-35273: 8 interactions\nCVE-2026-81578: 7 interactions\nCVE-2026-82078: 6 interactions\n", "creation_timestamp": "2026-09-27T07:03:00.063803Z"}, {"uuid": "d48556b0-64b6-4137-b18e-f47d84f61a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81578", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/117360015900047910", "content": "eSentire's TRU team shows how a threat actor exploited an internet-facing PaperCut MF server to deploy a Java loader & a web shell. Threat actors subsequently used the web shell to deploy a trojanized Microsoft Copilot binary carrying an AdaptixC2 implant. https://www.esentire.com/blog/papercut-mf-zero-day-intrusion-java-loader-web-shell-and-adaptixc2-via-cve-2026-82078-and-cve-2026-81578?utm_content=buffer77fc6&utm_medium=social&utm_source=twitter&utm_campaign=Buffer", "creation_timestamp": "2026-09-30T12:35:27.864432Z"}, {"uuid": "245d5240-2ca8-4904-b04b-5d918ab2931f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwqixr7nqi2j", "content": "Dringende kwetsbaarheden in PaperCut MF openen deuren voor geavanceerde cyberaan\n\nAanvallers hebben met succes twee zero-day kwetsbaarheden in PaperCut MF (versie 24.0.2, build 69746) ge\u00ebxploiteerd, aangeduid als CVE-2026-81578 en CVE-2026-82078. Deze kwetsbaarheden stelden hen in staat om z...", "creation_timestamp": "2026-09-30T14:01:15.585117Z"}, {"uuid": "a82489c7-dae1-4b4e-8c6f-64ec6de0a6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mwtknw7quk2w", "content": "PaperCut MF Zero-Day Intrusion: Java Loader, Web Shell, and AdaptixC2 via CVE-2026-82078 and CVE-2026-81578", "creation_timestamp": "2026-10-01T19:09:31.424564Z"}, {"uuid": "4b415448-1e34-47b4-bfb8-0a975db23969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "seen", "source": "Telegram/-dWy_hkyY9wWIt-1cKQPLa5nONXmYymUoKcUrpIsF5PpQwY", "content": "", "creation_timestamp": "2026-10-02T17:34:09.000000Z"}, {"uuid": "10ed8535-6b01-4f5c-aa4a-a357ecfdab0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81578", "type": "exploited", "source": "Telegram/-dWy_hkyY9wWIt-1cKQPLa5nONXmYymUoKcUrpIsF5PpQwY", "content": "", "creation_timestamp": "2026-10-02T17:34:09.000000Z"}]}