{"metadata": {"vulnerability": "CVE-2026-82077", "count": 31, "kinds": {"milestone": 5, "sighting": 16, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-08-28T00:13:21.684Z", "date_only": false, "value": "2026-08-28T00:13:21.684Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-82077", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1223", "record": "CERTFR-2026-AVI-1223", "field": "last_revision_date"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1223", "record": "CERTFR-2026-AVI-1223", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-82077", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82077", "record": "FKIE_CVE-2026-82077", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1223", "record": "CERTFR-2026-AVI-1223", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-24T06:43:35.197Z", "date_only": false, "value": "2026-09-24T06:43:35.197Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82077", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-24T07:16:33Z", "date_only": false, "value": "2026-09-24T07:16:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6392-7MRR-8QFW", "record": "GHSA-6392-7MRR-8QFW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-24T07:16:33.457Z", "date_only": false, "value": "2026-09-24T07:16:33.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82077", "record": "FKIE_CVE-2026-82077", "field": "published"}, {"timestamp": "2026-09-24T08:13:56.249Z", "date_only": false, "value": "2026-09-24T08:13:56.249754Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fpoggajmntksf", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "939ca7ce-3519-4d03-adf7-03bee608cf6d", "content": "CVE-2026-82077 - PaperCut NG/MF: Remote Code Execution via Scan2Fax\nCVE ID : CVE-2026-82077\n \n Published : Sept. 24, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-F...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/fpoggajmntksf"}, {"timestamp": "2026-09-24T09:31:51Z", "date_only": false, "value": "2026-09-24T09:31:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6392-7MRR-8QFW", "record": "GHSA-6392-7MRR-8QFW", "field": "published"}, {"timestamp": "2026-09-24T09:31:51Z", "date_only": false, "value": "2026-09-24T09:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6392-7MRR-8QFW", "record": "GHSA-6392-7MRR-8QFW", "field": "modified"}, {"timestamp": "2026-09-24T13:35:33.234Z", "date_only": false, "value": "2026-09-24T13:35:33.234800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbeqcgnb625", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "f02d80f8-5fc9-4366-93a4-3cf20f5dbb7d", "content": "\ud83d\udd17 CVE : CVE-2026-11744, CVE-2026-14780, CVE-2026-82077, CVE-2026-87739", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbeqcgnb625"}, {"timestamp": "2026-09-25T03:55:17.714Z", "date_only": false, "value": "2026-09-25T03:55:17.714Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-82077", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T11:31:39.300Z", "date_only": false, "value": "2026-10-09T11:31:39.300000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "c86c4d97-d076-4da2-98a9-b6ab332e14d2", "url": "https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578"}, {"timestamp": "2026-10-09T18:33:29.621Z", "date_only": false, "value": "2026-10-09T18:33:29.621298Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mxhmeth2cv2f", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "a75a33b5-165b-42f5-8080-5ea1a5547438", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - watchTowr Labs", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mxhmeth2cv2f"}, {"timestamp": "2026-10-09T18:39:31.426Z", "date_only": false, "value": "2026-10-09T18:39:31.426364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mxhmpndqjh2c", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "fac58c32-f1f5-4a58-b773-b975602edea8", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - watchTowr Labs", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3mxhmpndqjh2c"}, {"timestamp": "2026-10-09T18:58:20.182Z", "date_only": false, "value": "2026-10-09T18:58:20.182128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxhnr54juzm2", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "9d7fe046-db65-4670-9710-54973dfe63db", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) [\u2026]", "url": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxhnr54juzm2"}, {"timestamp": "2026-10-09T20:03:00.876Z", "date_only": false, "value": "2026-10-09T20:03:00.876878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxhrewm5el2z", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "427c3bbd-b54d-4b5d-a9c4-a6b64b56dd2d", "content": "~Watchtowr~\nUnauthenticated attackers can chain authentication bypass and RCE against PaperCut NG 26.0.4-PO build 76508.\n-\nIOCs: CVE-2026-82077, CVE-2026-81578, CVE-2026-82078\n-\n#CVE202682077 #PaperCut #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxhrewm5el2z"}, {"timestamp": "2026-10-09T22:22:36Z", "date_only": false, "value": "2026-10-09T22:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bGZMIAj8zyiwGVWBSmW7M9OfW0hk37hHrjSp7nJoDEgWCQk", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "d6bbb622-eea2-492a-b079-1214e4b35488"}, {"timestamp": "2026-10-09T22:22:36Z", "date_only": false, "value": "2026-10-09T22:22:36.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bGZMIAj8zyiwGVWBSmW7M9OfW0hk37hHrjSp7nJoDEgWCQk", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "283e1a07-1ef4-44aa-ba1b-459791a76c80"}, {"timestamp": "2026-10-10T11:33:02.382Z", "date_only": false, "value": "2026-10-10T11:33:02.382653Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117416393567437406", "record": "cve-2026-82077", "field": "creation_timestamp", "uuid": "f354b76d-b024-4daa-b77c-3722f0301408", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)#PaperCutNG #PaperCutMF #CVE_2026_82077 #CVE_2026_82078 #CVE_2026_81578 https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/", "url": "https://infosec.exchange/users/threatcodex/statuses/117416393567437406"}, {"timestamp": "2026-10-10T12:39:31.751Z", "date_only": false, "value": "2026-10-10T12:39:31.751667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxjj2twity2o", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "d3add780-acd2-41ab-8ba6-9a4d8173a729", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxjj2twity2o"}, {"timestamp": "2026-10-10T13:49:32.583Z", "date_only": false, "value": "2026-10-10T13:49:32.583139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxjmxzst2m24", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "dd56af1c-df13-4a7d-80a1-58fc994bbd73", "content": "CVE-2026-82077 is trending. Hype score 5, currently #5 on cvemon.\n\nAn improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-82077", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mxjmxzst2m24"}, {"timestamp": "2026-10-11T21:42:01.544Z", "date_only": false, "value": "2026-10-11T21:42:01.544581Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117424450493337361", "record": "cve-2026-82077", "field": "creation_timestamp", "uuid": "b5bdc24e-8672-4e31-aeaf-7b81b7f84f80", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/", "url": "https://infosec.exchange/users/patrickcmiller/statuses/117424450493337361"}, {"timestamp": "2026-10-12T07:47:28.494Z", "date_only": false, "value": "2026-10-12T07:47:28.494009Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mxnzogzaui2f", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "028a5dd5-c065-4fac-8778-803929a5abbc", "content": "[RSS] Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)\n\n\n labs.watchtowr.com -> \n\n\nOriginal->", "url": "https://bsky.app/profile/buherator.bsky.social/post/3mxnzogzaui2f"}, {"timestamp": "2026-10-12T16:56:16.682Z", "date_only": false, "value": "2026-10-12T16:56:16.682731Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117428989207919367", "record": "cve-2026-82077", "field": "creation_timestamp", "uuid": "f9446a7d-ba6f-46cd-9f7d-8c6f1f8f6416", "content": "If you missed this Friday post:\nWatchTower: Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/ #infosec #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117428989207919367"}, {"timestamp": "2026-10-12T19:42:06.173Z", "date_only": false, "value": "2026-10-12T19:42:06.173658Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mxpbm7ndjn2u", "record": "CVE-2026-82077", "field": "creation_timestamp", "uuid": "7d0370f3-8ce1-48fd-9784-4a5a86668a42", "content": "Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) labs.watchtowr.com/death-by-a-t...", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mxpbm7ndjn2u"}, {"timestamp": "2026-10-13T04:10:59.430Z", "date_only": false, "value": "2026-10-13T04:10:59.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-82077", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T04:10:59.430Z", "date_only": false, "value": "2026-10-13T04:10:59.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / PaperCut", "record": "CVE-2026-82077", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T04:17:22.010Z", "date_only": false, "value": "2026-10-13T04:17:22.010", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82077", "record": "FKIE_CVE-2026-82077", "field": "lastModified"}]}