PaperCut Flaws Exploited in AI-Powered Attacks
Source SecurityWeek
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 11 Sep 2026, 08:32 UTC
What to do
AI-suggested
The vulnerabilities CVE-2026-82078 and CVE-2026-81578 were disclosed on August 27, 2026, and patched the next day. Organizations should apply the official patches immediately to mitigate these flaws. Since this is not a cloud service, remediation depends on patching vulnerable PaperCut NG/MF instances. Patch status is confirmed as fixed by the vendor. No additional mitigation actions are specified beyond applying the official fixes.
Description
Two zero-day vulnerabilities in PaperCut NG/MF were exploited in AI-powered attacks by a Russian-speaking threat actor targeting hundreds of organizations worldwide. The flaws allowed remote unauthenticated attackers to bypass authentication and execute arbitrary code. The attacker used AI to rapidly build, test, and deploy exploits, compromising 440 deployments across 48 countries, primarily in the education sector. Credential harvesting, secret exfiltration, and domain admin privilege escalation were observed. The vulnerabilities were disclosed and patched shortly after, but the campaign demonstrated rapid exploitation using AI automation.