High 8.8
CVE-2026-81578
PaperCut NG/MF Exploitation via CVE-2026-81578 and CVE-2026-82078
Vendor / product: PaperCut NG/MF
Event date: 2026-08-27
Public PoC: Yes
First tracked by RiskWire: 2026-09-07
Sources & citations (14)
- PaperCut's Authentication Gap Returns: Two-Minute RCE Chain Hits 70,000 Organizations tech.yahoo.com · 2026-09-07
- PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws thehackernews.com · 2026-09-11
- AI-powered attack exploited PaperCut flaws to hack 395 organizations bleepingcomputer.com · 2026-09-10
- Hackers Use Hundreds of AI Agents to Exploit PaperCut Zero-Days hackread.com · 2026-09-10
- Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script theregister.com · 2026-09-10
- PaperCut Flaws Exploited in AI-Powered Attacks securityweek.com · 2026-09-11
- PaperCut MF/NG flaws attacked with hundreds of AI agents scmagazine.com · 2026-09-10
- PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances thehackernews.com · 2026-09-10
- AI-Orchestrated PaperCut Attack Compromises 440 Servers Across 48 Countries esecurityplanet.com · 2026-09-10
- AI agents exploited PaperCut flaws to breach 395 organizations helpnetsecurity.com · 2026-09-11
- PaperCut Ships Tested Fixes After AI Agents Breach 395 Organizations sqmagazine.co.uk · 2026-09-11
- PaperCut patches replace emergency fixes after AI attacks cybernews.com · 2026-09-11
- The PaperCut Pipeline: How Two Vulnerabilities Became an Automated RCE Factory tech.yahoo.com · 2026-09-12
- The Agentic Security Newsletter - Week of September 14, 2026 agenticsecurity.substack.com · 2026-09-15
References
See CVE-2026-81578 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →