Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
De multiples vulnérabilités ont été découvertes dans les produits Papercut. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
EPSS 0.01 CVE-2026-11744 CVE-2026-14780 CVE-2026-82077 CVE-2026-87739 PaperCut FR
Rilevate 3 vulnerabilità di sicurezza, di cui 2 con gravità "alta", in PaperCut NG/MF, software di gestione e monitoraggio della stampa per ambienti aziendali. Tali vulnerabilità, qualora sfruttate in particolari condizioni, potrebbero consentire ad un utente remoto malintenzionato di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-14780 CVE-2026-82077 PaperCut IT
This One Goes to Sixteen!Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the watchers!New module content (16)Elasticsearch ingest-attachment Apache Tika XFA XXE Local File ReadAuthors: Bourbon Offensive Security Services and Jean-Marie BourbonType: AuxiliaryPull request: #21739…
KEV ✓ · ransomware EPSS 0.94 CVE-2025-54988 CVE-2025-66516 CVE-2026-19295 CVE-2026-20079 CVE-2026-20929 CVE-2026-23744 CVE-2026-48558 CVE-2026-63077 CVE-2026-75604 CVE-2026-81578 CVE-2026-82078 CVE-2026-83548 CVE-2026-83549 Cisco PaperCut SonicWall JetBrains US
A threat actor, likely Russian-speaking, used hundreds of AI agents to develop and launch a global exploitation campaign targeting vulnerable PaperCut NG/MF servers. [...]
CVE-2021-42278 * CVE-2021-42287 * CVE-2026-81578 * CVE-2026-82078 * PaperCut US
11 organizations compromised in 26 seconds. GreyNoise breaks down the AI-enabled campaign against PaperCut that hit 440 instances across 48 countries.
PaperCut US
Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks. [...]
CVE-2023-2533 * CVE-2026-81578 * CVE-2026-82078 * PaperCut US
For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details, vehicle registration numbers, and information collected through car park, lounge, fast-track, and Wi-Fi…
KEV ✓ EPSS 0.85 CVSS 10.0 CVE-2026-18885 CVE-2026-18886 CVE-2026-74820 CVE-2026-75604 CVE-2026-81578 CVE-2026-82078 PaperCut Ubiquiti Vercel ServiceNow IL
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates…
KEV ✓ EPSS 0.85 CVSS 9.4 CVE-2026-81578 CVE-2026-82078 PaperCut veřejná správa US IT FI FR
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. [...]
CVE-2023-27350 * CVE-2026-81578 * CVE-2026-82078 * PaperCut US
PaperCut released an emergency advisory on Thursday evening saying vulnerabilities in their print management software, PaperCut NG and MF, are under active exploitation.
PaperCut US
Serial number: AV26-858Date: August 28, 2026 As of August 27, 2026, PaperCut is affected by vulnerabilities in the following products: PaperCut MF Prior to v24 Emergency Patch Release 2 Prior to v25 Emergency Patch Release 2 Prior to v26 Emergency Patch Release 2 PaperCut NG Prior to v24 Emergency Patch Release 2 Prior to v25 Emergency Patch Release 2 Prior to v26 Emergency Patch Release 2 The Cyber Centre encourages users and administrators to review the provided web link and apply any…
PaperCut CA
PaperCut heeft kwetsbaarheden verholpen in PaperCut MF en PaperCut NG. Een ongeauthenticeerde kwaadwillende kan de kwetsbaarheden mogelijk achtereenvolgens misbruiken om een PaperCut-omgeving over te nemen en hierop willekeurige code uit te voeren. Hiertoe dient de kwaadwillende malafide netwerkverkeer naar de kwetsbare PaperCut-omgeving te sturen.
PaperCut NL
Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the time of writing, the vulnerability has not been assigned a CVE identifier, and PaperCut has not publicly disclosed a CVSS score, vulnerability class, authentication requirements, or the technical details…
KEV ✓ · ransomware EPSS 1.00 CVE-2023-27350 PaperCut Software PaperCut školství výroba a průmysl US
PaperCut NG and PaperCut MF are under active exploitation. Huntress reproduced a pre-auth RCE chain and shares urgent patching and exposure guidance.
PaperCut US
CISA added CVE-2026-81578 to the Known Exploited Vulnerabilities catalog. Affected product: PaperCut NG/MF. Remediation due date: 2026-09-11.
KEV ✓ EPSS 0.85 CVE-2026-81578 PaperCut US
CISA added CVE-2026-82078 to the Known Exploited Vulnerabilities catalog. Affected product: PaperCut NG/MF. Remediation due date: 2026-09-11.
KEV ✓ EPSS 0.63 CVE-2026-82078 PaperCut US