Critical 9.4
CVE-2026-81578
AI-Driven Exploitation of PaperCut NG/MF Servers via CVE-2026-81578 and CVE-2026-82078
Vendor / product: PaperCut NG/MF
Event date: 2026-08-31
Public PoC: Yes
First tracked by RiskWire: 2026-10-16
Named threat actors
Russian-speaking threat actor (unnamed)
Sources & citations (4)
- Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide cybersecuritynews.com · 2026-10-16
- Des agents IA Codex et DeepSeek ont piraté plusieurs centaines de serveurs android-mt.ouest-france.fr · 2026-10-16
- Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials gbhackers.com · 2026-10-16
- Exposed Attacker Server Reveals AI Agent Toolkit and a Second PaperCut RCE Path securityonline.info · 2026-10-22
References
See CVE-2026-81578 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →