{"vulnerability": "CVE-2026-8207", "sightings": [{"uuid": "6bbae021-1259-4256-ba59-b6a8ed0dc245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "Telegram/25UzGBv5U41Up4gIz_3r2lNykNtWwaYPpQSQB5sUlEcEi44", "content": "", "creation_timestamp": "2026-08-29T23:00:03.879234Z"}, {"uuid": "f0048128-b83a-4864-9b46-95aad757249d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "Telegram/59qmJbxlXRw1hpXLsNomAnJqLLMJaCeoeuKXV4P1Fhmqb-w", "content": "", "creation_timestamp": "2026-08-29T23:00:05.925008Z"}, {"uuid": "5a481a0b-f433-4819-908b-c33d90eb6f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfh6k6yu52c", "content": "CVE-2026-8207 - Gibbon SQL Injection Vulnerability\nCVE ID : CVE-2026-8207\n \n Published : May 9, 2026, 3:16 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Gibbon versions before\u00a0v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphin...", "creation_timestamp": "2026-05-09T04:52:49.666412Z"}, {"uuid": "7ec16fa2-e7e4-4b22-8f45-76a95f74f606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "Telegram/59qmJbxlXRw1hpXLsNomAnJqLLMJaCeoeuKXV4P1Fhmqb-w", "content": "", "creation_timestamp": "2026-08-30T00:00:10.338819Z"}, {"uuid": "ee253b62-5b57-462c-8914-dcf545fa74fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/papercut-multiple-vulnerabilities_20260831", "content": "", "creation_timestamp": "2026-08-31T05:19:02.452224Z"}, {"uuid": "53d37042-68dc-4e8f-8fa3-97284123b41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/true_secator/8559", "content": "PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u044c\u044e PaperCut NG \u0438 MF \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u043d\u0435\u0435 PaperCut \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 PaperCut NG/MF 25 \u0438 26.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u043a\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2026-82078 \u0438 CVE-2026-81578, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nCVE-2026-81578 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PaperCut NG/MF.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0431\u044d\u043a\u044d\u043d\u0434\u0435 \u0434\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-82078 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 PaperCut.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u0438\u0445 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\u00a0\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 Java, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0443\u0442\u0438 \u043a \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 PaperCut.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u0440\u0435\u043b\u0438\u0437 2, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Huntress \u0438 watchTowr.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\nHuntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043b\u043e\u0433\u0430\u0445 PaperCut \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0444\u0430\u0439\u043b\u044b Java \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .class \u0432 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0441\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0435\u0436\u0434\u0443 PaperCut \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Huntress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430 \u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nHuntress \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432 PaperCut.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 2 \u0434\u043b\u044f PaperCut NG \u0438 MF \u0432\u0435\u0440\u0441\u0438\u0439 24, 25 \u0438 26 \u043d\u0430 Windows, Linux \u0438 macOS. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e 23 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u043d\u0435 \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432.\n\nPaperCut \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 pc-app.exe \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043b\u0438 \u0443\u0441\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b server.log, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 server.log.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.", "creation_timestamp": "2026-08-31T13:00:04.539825Z"}, {"uuid": "c64de7d3-772d-4187-846e-9912d2239e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xjn3nwj2g", "content": "~Cybergcca~\nPaperCut CVE-2026-81578 and CVE-2026-82078 are exploited in the wild; patch affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, CVE-2026-19516\n-\n#PaperCut #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:16:08.041605Z"}, {"uuid": "7e5aa23c-2f66-420e-9bbb-f9f932fc977b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6mps6inc23", "content": "\ud83d\udea8 PaperCut NG/MF \u2014 RCE attacks are active\n\nCVE-2026-81578 + CVE-2026-82078 can be chained for unauthenticated RCE. PaperCut has released Emergency Patch Release 2.\n\nstemshop.top/blog/papercu...\n\n#CVE #PaperCut #RCE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T00:30:10.155512Z"}, {"uuid": "dd3efc19-4f17-4518-bdcf-d30a4a1f68f9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d259be66-927c-49a1-a093-8d4e86378bc5", "content": "", "creation_timestamp": "2026-08-28T21:00:32.974540Z"}, {"uuid": "70d280ac-1cee-4d02-a8d8-44d99c4bcbd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mu6og3yyf62w", "content": "PaperCut says flaws in NG and MF, tracked as CVE-2026-82078 and CVE-2026-81578, are being actively exploited in customer incidents. Emergency patches are out after the first fix fell short. #PaperCut #CVE202682078 #CVE202681578", "creation_timestamp": "2026-08-29T01:00:28.305047Z"}, {"uuid": "682008db-c8ea-4e08-a936-c1c3ea1458b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "published-proof-of-concept", "source": "Telegram/59qmJbxlXRw1hpXLsNomAnJqLLMJaCeoeuKXV4P1Fhmqb-w", "content": "", "creation_timestamp": "2026-08-31T00:00:50.793201Z"}, {"uuid": "cce8b9ac-5125-4e9e-8e89-09a9d2c8ef67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117179067595414659", "content": "\ud83d\udcf0 PaperCut Zero-Day RCE Actively Exploited; Emergency Patches Released\n\ud83d\udea8 URGENT: PaperCut warns of an actively exploited zero-day RCE vulnerability chain affecting all NG/MF versions. The pre-auth flaws (CVE-2026-81578, CVE-2026-82078) allow full server takeover. Patch immediately! #Cybersecurity #ZeroDay #PaperCut\n\ud83d\udd17 https://cyber.netsecops.io/articles/papercut-warns-of-actively-exploited-zero-day-rce-vulnerability/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-29T13:37:59.494836Z"}, {"uuid": "239469e3-193f-48be-944c-d10ca4edf3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mu5ggzdvtt2j", "content": "\ud83d\udd17 CVE : CVE-2026-81578, CVE-2026-82078", "creation_timestamp": "2026-08-28T13:05:07.132053Z"}, {"uuid": "61033dfd-5e99-4f83-9f44-90f3ed057d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mu7yriretx26", "content": "\ud83d\udea8 URGENT: PaperCut warns of an actively exploited zero-day RCE vulnerability chain affecting all NG/MF versions. The pre-auth flaws (CVE-2026-81578, CVE-2026-82078) allow full server takeover. Patch immediately! #Cybersecurity #ZeroDay #PaperCut\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-29T13:38:26.151603Z"}, {"uuid": "0693d496-2627-4982-b3a5-a6f064afaefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82078", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mu75cviclk2v", "content": "PaperCut Under Active Attack: Full Technical Analysis of the Pre-Auth RCE Chain (CVE-2026-81578 +\u00a0CVE-2026-82078)\n\nActive exploitation of PaperCut NG/MF pre-auth RCE (CVE-2026-81578, CVE-2026-82078).\u2026\n\nhttps://thecybersecguru.com/news/papercut-cve-2026-81578-cve-2026-82078-pre-auth-rce-analysis/", "creation_timestamp": "2026-08-29T05:27:06.530438Z"}, {"uuid": "4e57827c-bbfb-494c-becf-80f5a85b6350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mu5m2gyywh25", "content": "The watchTowr team is currently working with PaperCut directly to resolve bypasses in patches released for the actively exploited zero-day vulnerabilities (now CVE-2026-81578, CVE-2026-82078) in PaperCut NG/MF.\n\nThis\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2093345328170758218)", "creation_timestamp": "2026-08-28T14:45:33.443947Z"}, {"uuid": "41fc70a5-e2f4-422d-8e6e-70f577cbd243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7zgephwl2u", "content": "CVE-2026-82078 - papercut mf/ng\nPaperCut MF and PaperCut NG allow the database driver to be chosen by a name in the configuration, but they don't verify that the driver is approved. If someone can change that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#papercut #CVE #infosec", "creation_timestamp": "2026-08-29T13:50:05.965744Z"}, {"uuid": "0a1e6037-9b49-4e6b-8bcd-57996682aace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "Telegram/_MkvWCyWZJHe2RNbxcbbJ8w73Oq-ZroyWog-I1ehVh_MDUs", "content": "", "creation_timestamp": "2026-08-29T00:00:06.848985Z"}, {"uuid": "b15b67b2-2c03-4f91-b89f-3638c77246b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82072", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu6s5ctlbu2u", "content": "\ud83d\udccc CVE-2026-82072 - Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted ... https://www.cyberhub.blog/cves/CVE-2026-82072", "creation_timestamp": "2026-08-29T02:07:06.811042Z"}, {"uuid": "88e81b8d-03fb-4dfe-b261-4f1132eb2df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82072", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bhi3iudprzoxf", "content": "CVE-2026-82072 - Google Chrome V8 Out-of-Bounds Read\nCVE ID : CVE-2026-82072\n \n Published : Aug. 28, 2026, 12:18 a.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code ...", "creation_timestamp": "2026-08-28T02:15:17.874171Z"}, {"uuid": "f1f32ee5-45bd-480c-aaca-ee00b9ef33e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu6so7k6z32d", "content": "CVE-2026-82078 is trending. Hype score 15, currently #4 on cvemon.\n\nAn unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-82078", "creation_timestamp": "2026-08-29T02:16:33.516514Z"}, {"uuid": "72e49d50-119f-4c61-a204-6638beba3005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-papercut-mf-en-ng-met-actief-misbruik-update-onmiddellijk", "content": "", "creation_timestamp": "2026-08-28T16:15:05.701263Z"}, {"uuid": "82d96eb8-616f-4d42-a2fa-dac9ce9af458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu5xdkdihz2u", "content": "\ud83d\udea8 CVE-2026-82078 \u2014 CVSS 9.4 CRITICAL\n\nAn unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82078\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T18:07:25.263569Z"}, {"uuid": "239271f8-9da0-404d-a05e-d0197b33f05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/papercut-security-advisory-av26-858", "content": "", "creation_timestamp": "2026-08-28T20:15:05.886595Z"}, {"uuid": "2ae099a9-0df1-41d9-88a6-1147e2b723ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "Telegram/_MkvWCyWZJHe2RNbxcbbJ8w73Oq-ZroyWog-I1ehVh_MDUs", "content": "", "creation_timestamp": "2026-08-30T00:00:55.910866Z"}, {"uuid": "dc34aaa0-74eb-4847-a1a0-2bfdb82d2f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mubp7tzhos2x", "content": "\ud83d\udea8 PaperCut Emergency \u2014 patched already? Patch again.\n\nActive attacks continue against CVE-2026-81578 + CVE-2026-82078. The original fixes were bypassed \u2014 Emergency Patch Release 2 is now required.\n\nstemshop.top/blog/papercu...\n\n#PaperCut #CVE #RCE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T05:52:58.977612Z"}, {"uuid": "30604c8b-dfc7-43e7-9c73-282d3896a0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/CyberSecurityIL/9401", "content": "\u05d7\u05d1\u05e8\u05ea PaperCut \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05e9\u05e0\u05d9 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e0\u05d2\u05d3 \u05e9\u05e8\u05ea\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2026-81578 \u05d5-CVE-2026-82078, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d1\u05e6\u05e2 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e9\u05e0\u05d9 \u05e4\u05d5\u05e8\u05e1\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d4\u05e6\u05dc\u05d9\u05d7\u05d5 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d1\u05db\u05de\u05d4 \u05d3\u05e8\u05db\u05d9\u05dd \u05d0\u05ea \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05d5\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05e1\u05d9\u05d9\u05d1\u05e8 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05db\u05d1\u05e8 \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd, \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u26a0\ufe0f\n\nhttps://t.me/CyberSecurityIL/9401", "creation_timestamp": "2026-08-30T10:00:05.716072Z"}, {"uuid": "f9d9597b-c9ee-48f6-a03d-e7a910535507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/CyberSecurityIL/86933", "content": "\u05d7\u05d1\u05e8\u05ea PaperCut \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05e9\u05e0\u05d9 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e0\u05d2\u05d3 \u05e9\u05e8\u05ea\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2026-81578 \u05d5-CVE-2026-82078, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d1\u05e6\u05e2 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e9\u05e0\u05d9 \u05e4\u05d5\u05e8\u05e1\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d4\u05e6\u05dc\u05d9\u05d7\u05d5 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d1\u05db\u05de\u05d4 \u05d3\u05e8\u05db\u05d9\u05dd \u05d0\u05ea \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05d5\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05e1\u05d9\u05d9\u05d1\u05e8 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05db\u05d1\u05e8 \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd, \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u26a0\ufe0f\n\nhttps://t.me/CyberSecurityIL/9401", "creation_timestamp": "2026-08-30T11:00:05.964719Z"}, {"uuid": "f1447fb1-5fa0-46c3-bf00-f63fdd0f106e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mudiyu4vc22z", "content": "PaperCut NG/MF\u3067\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3092\u78ba\u8a8d\u3000CVE-2026-82078/81578\u3092\u516c\u8868\u3001\u7dca\u6025\u30d1\u30c3\u30c1\u7b2c2\u7248\u3092\u516c\u958b \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-30T23:06:57.559022Z"}, {"uuid": "d359e214-f2da-4e2f-b517-245bd1dbfdda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/CyberSecurityIL/86933", "content": "\u05d7\u05d1\u05e8\u05ea PaperCut \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05e9\u05e0\u05d9 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e0\u05d2\u05d3 \u05e9\u05e8\u05ea\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2026-81578 \u05d5-CVE-2026-82078, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d1\u05e6\u05e2 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e9\u05e0\u05d9 \u05e4\u05d5\u05e8\u05e1\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d4\u05e6\u05dc\u05d9\u05d7\u05d5 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d1\u05db\u05de\u05d4 \u05d3\u05e8\u05db\u05d9\u05dd \u05d0\u05ea \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05d5\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05e1\u05d9\u05d9\u05d1\u05e8 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05db\u05d1\u05e8 \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd, \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u26a0\ufe0f\n\nhttps://t.me/CyberSecurityIL/9401", "creation_timestamp": "2026-08-31T00:00:26.191756Z"}, {"uuid": "63331b72-4316-48b7-a5e6-6176f28b009f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/CyberSecurityIL/9401", "content": "\u05d7\u05d1\u05e8\u05ea PaperCut \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d7\u05d9\u05e8\u05d5\u05dd \u05e9\u05e0\u05d9 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e0\u05d2\u05d3 \u05e9\u05e8\u05ea\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea, CVE-2026-81578 \u05d5-CVE-2026-82078, \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d1\u05e6\u05e2 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\n\u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e9\u05e0\u05d9 \u05e4\u05d5\u05e8\u05e1\u05dd \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d7\u05d5\u05e7\u05e8\u05d9\u05dd \u05d4\u05e6\u05dc\u05d9\u05d7\u05d5 \u05dc\u05e2\u05e7\u05d5\u05e3 \u05d1\u05db\u05de\u05d4 \u05d3\u05e8\u05db\u05d9\u05dd \u05d0\u05ea \u05d4\u05ea\u05d9\u05e7\u05d5\u05df \u05d4\u05e8\u05d0\u05e9\u05d5\u05df \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\n\u05dc\u05e4\u05d9 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d9\u05dd \u05e9\u05dc \u05d7\u05d1\u05e8\u05d5\u05ea \u05de\u05d5\u05d3\u05d9\u05e2\u05d9\u05df \u05e1\u05d9\u05d9\u05d1\u05e8 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05db\u05d1\u05e8 \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd, \u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u26a0\ufe0f\n\nhttps://t.me/CyberSecurityIL/9401", "creation_timestamp": "2026-08-31T00:00:27.445835Z"}, {"uuid": "25a66d98-1291-45b6-bbfb-2159b6508ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3mueibpdbtc2c", "content": "We have published our @metasploit-r7.bsky.social exploit for the recent PaperCut MF and NG zero-day (CVE-2026-81578 + CVE-2026-82078) that is being actively exploited in-the-wild. github.com/rapid7/metas...", "creation_timestamp": "2026-08-31T08:26:37.627156Z"}, {"uuid": "28b6b50d-9214-4402-be43-bae473aa90e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muejnhyutk22", "content": "A PaperCut zero-day (CVE-2026-81578, CVE-2026-82078) is exploited in the wild. Attackers run malicious SQL for RCE, and a Metasploit PoC is now public.\n\n#PaperCut #CVE202682078 #ZeroDay #RCE #InfoSec #Metasploit #SQLi", "creation_timestamp": "2026-08-31T08:51:03.818074Z"}, {"uuid": "ae30cd54-7f36-4a53-b582-819faeec422c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3muemgxnxeo2e", "content": "\u300c\u898b\u305b\u308b\u30da\u30fc\u30b8\u300d\u306e\u8a8d\u53ef\u3060\u3051\u898b\u3066\u3001\u300c\u52d5\u304b\u3059\u90e8\u54c1\u300d\u306e\u8a8d\u53ef\u3092\u898b\u3066\u306d\u3047\u3002\u7384\u95a2\u306e\u672d\u3092\u898b\u3066\u308b\u9593\u306b\u3001\u7ba1\u7406\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u304c\u52d5\u304f\u3002\ud83d\udc8e\n\nPaperCut NG/MF\u3001CVE-2026-81578\uff08\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\uff09\uff0bCVE-2026-82078\u3002\u672a\u8a8d\u8a3cRCE\u306b\u7e4b\u304c\u308b\u9023\u9396\u3002\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u3002\nhttps://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild\n#PaperCut #AuthN", "creation_timestamp": "2026-08-31T09:41:06.576464Z"}, {"uuid": "d79e15e8-f694-441a-a90c-4a53dce4f8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muesk6ynae2g", "content": "PaperCut Issues Second Patch as Bypasses Found \u2014 PaperCut's first emergency patch had bypasses. CVE-2026-81578 (auth bypass, CVSS 8.8) and CVE-2026-82078 (RCE, CVSS 9.4) remain exploitable on EP1 installs. Apply Emer https://0daynews.com/articles/2026-08-29-papercut-second-patch-cve-2026-81578-82078", "creation_timestamp": "2026-08-31T11:30:16.960600Z"}, {"uuid": "65e1528d-76df-451e-ba74-e19e1161be28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://www.acn.gov.it/portale/w/papercut-rilevato-sfruttamento-in-rete-delle-cve-2026-82078-e-cve-2026-81578", "content": "", "creation_timestamp": "2026-08-31T12:15:17.389533Z"}, {"uuid": "482ca9f4-8c35-409e-9aff-40ff0a291f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3muf355td2m2t", "content": "PaperCut disclosed two exploited vulnerabilities (CVE-2026-82078, CVE-2026-81578), enabling unauthenticated access to sensitive information and prompting immediate patching and isolation.\n", "creation_timestamp": "2026-08-31T14:04:04.573240Z"}, {"uuid": "10469fe2-4cff-4b26-8e05-e25ff4ac2828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3muf35lje7m2z", "content": "PaperCut disclosed two exploited vulnerabilities (CVE-2026-82078, CVE-2026-81578), enabling unauthenticated access to sensitive information and prompting immediate patching and isolation.\n", "creation_timestamp": "2026-08-31T14:04:18.904889Z"}, {"uuid": "38d9e7a8-e0fb-4fa8-b485-a1f574aa3655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3muf362dhve2y", "content": "PaperCut disclosed two exploited vulnerabilities (CVE-2026-82078, CVE-2026-81578), enabling unauthenticated access to sensitive information and prompting immediate patching and isolation.\n", "creation_timestamp": "2026-08-31T14:04:33.548046Z"}, {"uuid": "34969275-4553-4742-9a1c-11862fa87d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://t.me/information_security_channel/55823", "content": "More Details Emerge on Exploited PaperCut Vulnerabilities\nhttps://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/\n\nPaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.\nThe post More Details Emerge on Exploited PaperCut Vulnerabilities (https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-31T15:00:04.052292Z"}, {"uuid": "9482f080-b5b2-4a4c-802a-a2d291c0ca31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mufa6qucof23", "content": "\ud83d\uded1 CVE-2026-82078\nPaperCut NG/MF\nCVSS 9.4 / EPSS 0% / KEV: No\nTL;DR: An unsafe dynamic class loading vulnerability exists in the database connection utilities of\u2026\nhttps://cvesentinel.com/report/CVE-2026-82078?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-31T15:34:25.439907Z"}, {"uuid": "31be5919-3187-4b1f-ba29-58420f5dbcac", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4d27face-c305-4382-a707-631f016fd57b", "content": "", "creation_timestamp": "2026-08-31T16:00:02.437249Z"}, {"uuid": "238b2dde-2fa5-42e4-9de9-ec4fb257ba93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-08-31T16:15:05.800265Z"}, {"uuid": "100ff221-3acf-4c02-9029-5b27e3a08922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117191056516789304", "content": "PaperCut has made the cut. Two vulnerabilities have been added to the KEV catalogue.\nCISA: CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability\nCVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82078 #CISA #infosec #vulnerability", "creation_timestamp": "2026-08-31T16:26:52.252728Z"}, {"uuid": "d4ae60e3-fbbc-4f9e-9706-351f4615531c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mufllqj2w32l", "content": "More Details Emerge on Exploited PaperCut\u00a0Vulnerabilities\n\nPaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578. The post More Details Emerge on Exploited PaperCut Vulnerabilities appeared first on SecurityWeek .", "creation_timestamp": "2026-08-31T18:58:32.810004Z"}, {"uuid": "c9cb301f-1a60-42d4-bf80-778c8a0051b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mufpmtcuc725", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-82078", "creation_timestamp": "2026-08-31T20:10:43.889159Z"}, {"uuid": "eac0d11e-6d46-440f-9cf7-acd20e4d57be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufpoa26uu2c", "content": "~Checkpoint~\nAttacks hit airports, healthcare and government while actively exploited flaws enable remote code execution.\n-\nIOCs: CVE-2026-82078, CVE-2026-18885, CVE-2026-75604\n-\n#Ransomware #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-08-31T20:11:31.678958Z"}, {"uuid": "f10b815a-891f-4cc7-b77f-6dbb0e60f647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufqb53lj32b", "content": "~Cisa~\nCISA added two actively exploited PaperCut NG/MF flaws to its KEV Catalog.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078\n-\n#CVE202681578 #CVE202682078 #ThreatIntel", "creation_timestamp": "2026-08-31T20:22:05.410424Z"}, {"uuid": "7a2cde8d-0440-48b8-9516-cf9a92fcd99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufqtzakmc2q", "content": "~Cybergcca~\nPaperCut flaws are exploited in the wild and added to CISA KEV; update affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078\n-\n#CVE202681578 #CVE202682078 #PaperCut #ThreatIntel", "creation_timestamp": "2026-08-31T20:32:38.563466Z"}, {"uuid": "b6d5b583-58b9-4e4c-aad6-ffce9de3fd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mufux4c4kf2b", "content": "URGENT C-Suite Brief: CVE-2026-82078 active exploitation targets PaperCut NG/MF with unsafe reflection and arbitrary Java execution. Read our executive brief for rapid EDR tuning, least privilege controls, and asset integrity protection. https://thecybermind.co/4im9", "creation_timestamp": "2026-08-31T21:45:57.904650Z"}, {"uuid": "2361b184-b8a8-4f99-881d-edeb9bfc038a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mufxskrknk24", "content": "\ud83d\udccc PaperCut NG and MF Vulnerabilities CVE-2026-81578 and CVE-2026-82078 Exploited in the Wild, Second P... https://www.cyberhub.blog/article/31478-papercut-ng-and-mf-vulnerabilities-cve-2026-81578-and-cve-2026-82078-exploited-in-the-wild-second-patch-released", "creation_timestamp": "2026-08-31T22:37:06.882056Z"}, {"uuid": "0d4086db-7938-437c-82c4-e934d035bd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/information_security_channel/55823", "content": "More Details Emerge on Exploited PaperCut Vulnerabilities\nhttps://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/\n\nPaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.\nThe post More Details Emerge on Exploited PaperCut Vulnerabilities (https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-01T00:00:09.419158Z"}, {"uuid": "9ee916e3-96f0-4021-ab81-14060d266077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/true_secator/8559", "content": "PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u044c\u044e PaperCut NG \u0438 MF \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u043d\u0435\u0435 PaperCut \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 PaperCut NG/MF 25 \u0438 26.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u043a\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2026-82078 \u0438 CVE-2026-81578, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nCVE-2026-81578 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PaperCut NG/MF.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0431\u044d\u043a\u044d\u043d\u0434\u0435 \u0434\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-82078 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 PaperCut.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u0438\u0445 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\u00a0\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 Java, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0443\u0442\u0438 \u043a \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 PaperCut.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u0440\u0435\u043b\u0438\u0437 2, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Huntress \u0438 watchTowr.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\nHuntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043b\u043e\u0433\u0430\u0445 PaperCut \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0444\u0430\u0439\u043b\u044b Java \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .class \u0432 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0441\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0435\u0436\u0434\u0443 PaperCut \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Huntress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430 \u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nHuntress \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432 PaperCut.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 2 \u0434\u043b\u044f PaperCut NG \u0438 MF \u0432\u0435\u0440\u0441\u0438\u0439 24, 25 \u0438 26 \u043d\u0430 Windows, Linux \u0438 macOS. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e 23 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u043d\u0435 \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432.\n\nPaperCut \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 pc-app.exe \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043b\u0438 \u0443\u0441\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b server.log, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 server.log.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.", "creation_timestamp": "2026-09-01T00:00:09.882743Z"}, {"uuid": "605e0542-e2d7-418f-8967-de9a5d0d0eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://www.acn.gov.it/portale/w/papercut-rilevato-sfruttamento-in-rete-delle-cve-2026-82078-e-cve-2026-81578", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-82078 e CVE-2026-81578 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nei prodotti PaperCut NG e PaperCut MF, soluzioni software per la gestione e il controllo delle stampe.", "creation_timestamp": "2026-09-01T01:00:34.324309Z"}, {"uuid": "490846d3-9f31-4c8a-bf8d-0bbf6c0f4811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mughecxqgb2m", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Aug 31)\n\nCVE-2026-81578 PaperCut NG/MF\u306b\u304a\u3051\u308b\u91cd\u8981\u6a5f\u80fd\u306e\u8a8d\u8a3c\u6b20\u843d\u306e\u8106\u5f31\u6027 \nCVE-2026-82078 PaperCut NG/MF \u306e\u5b89\u5168\u3067\u306a\u3044\u53cd\u5c04\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-01T03:15:28.057120Z"}, {"uuid": "3c5b7ecf-56d9-4a8c-9610-3ca2067e9f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mugjx5siqn22", "content": "\ud83d\udd34 PAPERCUT ZERO-DAY CHAIN: CVE-2026-81578 (auth bypass) + CVE-2026-82078 (RCE) actively exploited. Affects all NG/MF versions. Metasploit module PR submitted. CISA KEV listed. Patch immediately. Source: @Rapid7 + @TheHackerNews #Vulnerability", "creation_timestamp": "2026-09-01T04:01:47.480688Z"}, {"uuid": "a84e4136-8240-45bd-9a23-6b800b958818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3muglzpnam52i", "content": "URGENT C-Suite Brief: CVE-2026-82078 active exploitation targets PaperCut NG/MF with unsafe reflection and arbitrary Java execution. Read our executive brief for rapid EDR tuning, least privilege controls, and asset integrity protection. https://thecybermind.co/pzil", "creation_timestamp": "2026-09-01T04:39:01.822367Z"}, {"uuid": "b90e405c-cfd8-467a-b8f4-3926c8de97ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mugsapoksn22", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-82078: \u26a0\ufe0f CVE-2026-82078: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.5%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-82078-an-unsafe-dynamic-class-loading-vulnerability", "creation_timestamp": "2026-09-01T06:30:18.201169Z"}, {"uuid": "94217918-7266-41a6-a10c-2cdc0e7aab0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muguckixcf23", "content": "\ud83d\udccc CVE-2026-82078 - An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates... https://www.cyberhub.blog/cves/CVE-2026-82078", "creation_timestamp": "2026-09-01T07:07:07.770390Z"}, {"uuid": "f8561973-aa70-4be8-96cb-10da4f58e3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mugvohvnbz2k", "content": "T-Suite Technical Brief: CVE-2026-82078 active exploitation targets PaperCut NG/MF with unsafe reflection & arbitrary Java execution. Read our engineering runbook for CrowdStrike CQL detection rules, ATT&CK mapping, and hardening controls.\nhttps://thecybermind.co/zqkw", "creation_timestamp": "2026-09-01T07:31:41.511786Z"}, {"uuid": "b5db631c-e670-474c-80b0-055f4c0f62f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/427", "content": "Exploit module for the recent PaperCut MF/NG 0day (CVE-2026-81578 + CVE-2026-82078)\n\nModule supports both MF and NG editions, and all supported product versions 26.x, 25.x, 24.x. Bypasses vendor emergency patch v1. Emergency patch v2 successfully remediates the chain. Module also has platform agnostic Java payload support (and that will be in-memory on 26.x targets), along with OS command based payloads.\n\nBlog: https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-01T08:00:05.597661Z"}, {"uuid": "f4cde0de-0260-412f-8e29-80a38e68f5c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/guardingpearsof.bsky.social/post/3mugxsemhog2f", "content": "Two vulnerabilities in PaperCut NG and MF print management software are now being used by attackers in data theft campaigns.\nPaperCut software is used by millions of people across thousands of organizations.\nThe flaws are tracked as CVE-2026-81578 and CVE-2026-82078.\n", "creation_timestamp": "2026-09-01T08:09:40.320450Z"}, {"uuid": "27fa3a1b-b588-49d1-b8a1-81033a5d69c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://t.me/information_security_channel/55830", "content": "PaperCut Exploitation Escalates to Active Intrusions\nhttps://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/\n\nCISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog.\nThe post PaperCut Exploitation Escalates to Active Intrusions (https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-01T10:00:03.730764Z"}, {"uuid": "cb200496-7c7a-475a-b1e7-a16306cf44e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3muhdade3l22h", "content": "\u3010Forsmile \u65b0\u7740\u8a18\u4e8b\ud83d\udcbb\u3011\n\u3010\u7dca\u6025\u3011PaperCut NG/MF CVE-2026-81578\uff1a\u7dca\u6025\u30d1\u30c3\u30c1Release 3\u3092\u4eca\u3059\u3050\u9069\u7528 \u2014 \u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u306e\u8a8d\u8a3c\u56de\u907f\u304b\u3089RCE\u3078\u306e\u9023\u9396\n\nPaperCut NG/MF \u306e CVE-2026-81578 \u3068 CVE-2026-82078\u3002\u4eca\u3059\u3050\u7ba1\u7406\u753b\u9762\u3078\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u3092\u5236\u9650\u3057\u3001\u7dca\u6025\u30d1\u30c3\u30c1 Release 3 \u3092\u9069\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u30022\u3064\u3092\u9023\u9396\u3055\u305b\u305f\u653b\u6483\u304c\u5b9f\u969b\u306b\u767a\u751f\u3057\u30012026\u5e748\u670831\u65e5\u306bCISA\u306e\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u30ea\u30b9\u30c8\u3078\u8ffd\u52a0\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7\u3067\u306f\u5b89\u5168\u304b\u5224\u65ad\u3067\u304d\u307e\u305b\u3093\u3002\nforsmile.jp/articles/pap...", "creation_timestamp": "2026-09-01T11:34:19.541382Z"}, {"uuid": "afd79160-7b9e-4890-bd5d-2b1978c7aa95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82078", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117197511429263890", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\nDashboard World Map view stats:  https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-81578%2B&tag=cve-2026-82078%2B&data_set=count&scale=log&auto_update=on\nDaily IP data now in our Vulnerable HTTP reporting, tagged 'cve-2026-82078' & 'cve-2026-81578': https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nTree map view: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=http_vulnerable&source=http_vulnerable6&tag=cve-2026-81578%2B&tag=cve-2026-82078%2B&data_set=count&scale=log&auto_update=on\nNVD entry: https://nvd.nist.gov/vuln/detail/cve-2026-82078https://nvd.nist.gov/vuln/detail/cve-2026-81578\nPatch info: https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ \nMake sure to install Emergency Patch (Release 2) - but assume compromise.\nDetection based on Nuclei template by @darses  - https://github.com/projectdiscovery/nuclei-templates/pull/17025\nBackground on PaperCut incidents: https://www.huntress.com/blog/papercut-actively-exploited", "creation_timestamp": "2026-09-01T19:48:27.276991Z"}, {"uuid": "22f99fab-a6c9-483d-8f9b-99de484e3bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui6v2qfxs2s", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T19:49:09.573064Z"}, {"uuid": "f2d019f4-9cce-415d-a9d0-c9cd35617a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui6v5g5522s", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T19:49:10.599443Z"}, {"uuid": "38f2792f-2396-4b5a-be8b-de4a46f0f132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui6v5g64c2s", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T19:49:11.592794Z"}, {"uuid": "90778827-b92d-4e80-b0c3-7725fece8478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui7xbnw622t", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T20:08:17.651998Z"}, {"uuid": "3717b324-34ed-466b-bda2-41d006b4efbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82078", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3muibmyveke2l", "content": "PaperCut NG/MF: Critical Authentication Bypass and RCE Chain CVE-2026-81578 & CVE-2026-82078\n\nhttps://horizon3.ai/attack-research/vulnerabilities/cve-2026-81578-cve-2026-82078\nhttps://flagthis.com/tldr/6834\n\n##RCE ##ZeroDay ##PaperCut ##AuthenticationBypass ##CyberSecurity", "creation_timestamp": "2026-09-01T20:38:17.081065Z"}, {"uuid": "4d95b090-ba23-4ecf-bc15-ac75afa464eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui7x6xtbs2t", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T20:08:15.187368Z"}, {"uuid": "a5489c1f-8b9e-4fdf-8e8b-89fb6d1d869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mui7xbnv6s2t", "content": "PaperCut MF/NG incidents: At least 204 instances found on 2026-08-31 still vulnerable to CVE-2026-82078/CVE-2026-81578 RCE that is exploited in the wild. Make sure to check for compromise & patch. Top affected: US (60).\n\nDashboard World Map view stats:  dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-01T20:08:16.631186Z"}, {"uuid": "5a5bc7b0-ba25-4e8c-a65e-69a734199bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://t.me/information_security_channel/55830", "content": "PaperCut Exploitation Escalates to Active Intrusions\nhttps://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/\n\nCISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog.\nThe post PaperCut Exploitation Escalates to Active Intrusions (https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-02T01:05:08.799602Z"}, {"uuid": "a211036a-5d77-4e15-bca7-c100e0b17b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/P0x3k_1N73LL1G3NC3/427", "content": "Exploit module for the recent PaperCut MF/NG 0day (CVE-2026-81578 + CVE-2026-82078)\n\nModule supports both MF and NG editions, and all supported product versions 26.x, 25.x, 24.x. Bypasses vendor emergency patch v1. Emergency patch v2 successfully remediates the chain. Module also has platform agnostic Java payload support (and that will be in-memory on 26.x targets), along with OS command based payloads.\n\nBlog: https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-02T01:05:08.935687Z"}, {"uuid": "9e35a718-035d-48f6-8beb-a8e01661ad3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://t.me/S_E_Reborn/6578", "content": "PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u044c\u044e PaperCut NG \u0438 MF \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u043d\u0435\u0435 PaperCut \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 PaperCut NG/MF 25 \u0438 26.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u043a\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2026-82078 \u0438 CVE-2026-81578, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nCVE-2026-81578 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PaperCut NG/MF.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0431\u044d\u043a\u044d\u043d\u0434\u0435 \u0434\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-82078 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 PaperCut.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u0438\u0445 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\u00a0\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 Java, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0443\u0442\u0438 \u043a \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 PaperCut.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u0440\u0435\u043b\u0438\u0437 2, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Huntress \u0438 watchTowr.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\nHuntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043b\u043e\u0433\u0430\u0445 PaperCut \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0444\u0430\u0439\u043b\u044b Java \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .class \u0432 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0441\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0435\u0436\u0434\u0443 PaperCut \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Huntress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430 \u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nHuntress \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432 PaperCut.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 2 \u0434\u043b\u044f PaperCut NG \u0438 MF \u0432\u0435\u0440\u0441\u0438\u0439 24, 25 \u0438 26 \u043d\u0430 Windows, Linux \u0438 macOS. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e 23 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u043d\u0435 \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432.\n\nPaperCut \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 pc-app.exe \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043b\u0438 \u0443\u0441\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b server.log, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 server.log.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.", "creation_timestamp": "2026-09-02T06:00:05.184399Z"}, {"uuid": "19bc411e-446c-49ac-808d-6883900c42af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117200799002428660", "content": "Huntress logged confirmed attacks against at least two customers.\nSYSTEM NOTE: WatchTowr did not make this worse. The situation was already worse. WatchTowr merely filed a report.\nApply PaperCut's emergency patches for both CVE-2026-81578 and CVE-2026-82078 immediately, and check for indicators of compromise dating back to August 26.\nReward: You've received a Duplicate Incident Ticket \u2014 it's the same as the first one but somehow more urgent.\n#PaperCut #ZeroDay #CVE #CyberSecurity (2/2)", "creation_timestamp": "2026-09-02T09:49:05.876991Z"}, {"uuid": "e84f77ac-7df6-4626-8b1a-5e3167e121af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://t.me/S_E_Reborn/6578", "content": "PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0447\u0430\u0442\u044c\u044e PaperCut NG \u0438 MF \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u043d\u0435\u0435 PaperCut \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 PaperCut NG/MF 25 \u0438 26.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE \u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u043a\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2026-82078 \u0438 CVE-2026-81578, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nCVE-2026-81578 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0440\u0438\u0441\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f PaperCut NG/MF.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0431\u044d\u043a\u044d\u043d\u0434\u0435 \u0434\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-82078 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 9.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 PaperCut.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u044b \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043c\u0435\u043d \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u0438\u0445 \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432.\u00a0\n\n\u0415\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u0439\u0442-\u043a\u043e\u0434 Java, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0443\u0442\u0438 \u043a \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 PaperCut.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 PaperCut \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447-\u0440\u0435\u043b\u0438\u0437 2, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0433\u0440\u0443\u043f\u043f\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Huntress \u0438 watchTowr.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0440\u0435\u043b\u0438\u0437 \u0432\u044b\u0448\u0435\u043b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\nHuntress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0443\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u043b\u043e\u0433\u0430\u0445 PaperCut \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u043b\u043e\u0433\u0430\u0445 \u0444\u0430\u0439\u043b\u044b Java \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .class \u0432 \u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0441\u0442 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0435\u0436\u0434\u0443 PaperCut \u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Huntress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430 \u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nHuntress \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432 PaperCut.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 2 \u0434\u043b\u044f PaperCut NG \u0438 MF \u0432\u0435\u0440\u0441\u0438\u0439 24, 25 \u0438 26 \u043d\u0430 Windows, Linux \u0438 macOS. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e 23 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u043d\u0435 \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432.\n\nPaperCut \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 pc-app.exe \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043b\u0438 \u0443\u0441\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b server.log, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 server.log.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u044f\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.", "creation_timestamp": "2026-09-03T00:00:53.624305Z"}, {"uuid": "d60ca1a3-f40e-4ebd-9fbc-4cfcf0c42d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/eudatabriefly.bsky.social/post/3muqy5wpzam2c", "content": "Threat actors exploit PaperCut CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts in U.S. and Europe education targets.\n", "creation_timestamp": "2026-09-05T07:42:45.884475Z"}, {"uuid": "cf18ce0c-ea42-47e3-8eac-ebcd39908e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3muqy6byfkj2g", "content": "Threat actors exploit PaperCut CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts in U.S. and Europe education targets.\n", "creation_timestamp": "2026-09-05T07:42:57.008872Z"}, {"uuid": "0cc1c39f-998e-4538-8d47-3f3c160efee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3muqy6ldnmn2n", "content": "Threat actors exploit PaperCut CVE-2026-81578 and CVE-2026-82078 to steal credentials and create privileged accounts in U.S. and Europe education targets.\n", "creation_timestamp": "2026-09-05T07:43:07.219399Z"}, {"uuid": "83021583-2f40-4a3f-8444-f96d2fbe05b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "content": "Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe.\n\nThe Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 \u2013 an authentication bypass and remote code execution chain \u2013 to conduct command execution and reconnaissance, as well as", "creation_timestamp": "2026-09-05T10:00:47.509278Z"}, {"uuid": "38c62fe8-7e4e-4262-9281-3b75d78993e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3murayiciq72g", "content": "\ud83e\udd16 PaperCut auth bypass + RCE chain (CVE-2026-81578, CVE-2026-82078) exploited in the wild against schools in the US/Europe for credential theft, per Arctic Wolf. Patch now.\nhttps://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "creation_timestamp": "2026-09-05T10:20:45.908249Z"}, {"uuid": "ff62ee18-0180-4dd1-aa9d-97bdb0973913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3murbeqp7bq2x", "content": "PaperCut\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3068RCE\u306e\u8106\u5f31\u6027\uff08CVE-2026-81578, CVE-2026-82078\uff09\u304c\u3042\u308a\u3001\u6559\u80b2\u6a5f\u95a2\u3092\u6a19\u7684\u3068\u3057\u305f\u653b\u6483\u3067\u8a8d\u8a3c\u60c5\u5831\u7a83\u53d6\u3084\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-05T10:27:38.247971Z"}, {"uuid": "97e00987-7ad6-4ff6-b6a7-0e38a586394e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3murdwozqrn27", "content": "Two chained PaperCut flaws (CVE-2026-81578, CVE-2026-82078) are hitting US/EU schools for credential theft, per Arctic Wolf \u2014 both on CISA KEV. Restrict internet-facing servers now. https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "creation_timestamp": "2026-09-05T11:13:26.978028Z"}, {"uuid": "c3c9de40-0857-4135-85d3-52d06618fb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "Telegram/EiuMVLgHOwo_5_btOtFacIrZAPOQgSEh20v4-AQl3xsbOw", "content": "", "creation_timestamp": "2026-09-05T13:00:05.316923Z"}, {"uuid": "a6e0d2fc-d283-47ff-9a06-4f025741bb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "Telegram/EiuMVLgHOwo_5_btOtFacIrZAPOQgSEh20v4-AQl3xsbOw", "content": "", "creation_timestamp": "2026-09-06T00:00:47.482129Z"}, {"uuid": "94e97955-f36b-48ad-9f5a-030ead6e8e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "content": "Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe.\n\nThe Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 \u2013 an authentication bypass and remote code execution chain \u2013 to conduct command execution and reconnaissance, as well as", "creation_timestamp": "2026-09-06T01:00:34.060586Z"}, {"uuid": "00b7983c-7ba2-4144-805e-e6c5c6fb16ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/topkeyshop.bsky.social/post/3mutelevf4b2f", "content": "PaperCut zero-day alert: CVE-2026-82078 (CVSS 9.4) chains with CVE-2026-81578 for pre-auth RCE on NG/MF servers \u2014 and it\u2019s already being exploited. Patch to 25.1.2 or 26.0.1 now. Top Key Shop breaks down the emergency fix in the linked guide \ud83d\udea8", "creation_timestamp": "2026-09-06T06:30:21.599017Z"}, {"uuid": "a283dada-011b-48db-b041-726c1d385c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv5bvefdc26", "content": "\ud83d\udd34 PaperCut attacks are moving beyond RCE\n\nAttackers exploiting CVE-2026-81578 and CVE-2026-82078 are now stealing credentials, targeting SAM/LDAP secrets and using compromised print servers\n\nstemshop.top/blog/papercu...\n\n#CVE #CVE202681578 #CVE202682078 #PaperCut #CredentialTheft #RCE #CyberSecurity", "creation_timestamp": "2026-09-06T23:25:09.739361Z"}, {"uuid": "52272b38-1def-4937-b7b6-13fb7031c520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3muvyg4lur72a", "content": "Twee PaperCut-kwetsbaarheden vormen een groeiende bedreiging sinds eind augustus\n\nSinds 27 augustus 2026 worden twee kritieke kwetsbaarheden in PaperCut-servers actief uitgebuit. De kwetsbaarheden, ge\u00efdentificeerd als CVE-2026-81578 en CVE-2026-82078, werden op 28 augustus 2026 toegewezen en...", "creation_timestamp": "2026-09-07T07:30:38.725583Z"}, {"uuid": "67e73be5-de56-42ad-8733-e8be9fae01ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3muxo5ehxce2t", "content": "Threat actors are exploiting PaperCut flaws (CVE-2026-81578 & CVE-2026-82078) to target US & European educational institutions, enabling credential theft and remote code execution.", "creation_timestamp": "2026-09-07T23:32:06.602824Z"}, {"uuid": "e4779945-bd9f-4391-ab91-6eb82950b6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb", "content": "{\"aliases\": [], \"arch\": \"java, cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass in PaperCut NG and MF. A crafted Apache Tapestry\\n          complex-direct request invokes privileged ConfigEditor components through the public Home\\n          page. On version 26, the module reconfigures external user lookup to use an H2 JDBC URL whose\\n          initialization SQL evaluates Groovy code. On versions 24 and 25, it uses a bundled Derby\\n          procedure to write a temporary Groovy bootstrap class to the application classpath, then loads\\n          it as a database driver. The Java target serves an executable payload JAR and a generic\\n          memory-backed JAR loader over HTTP. Its payload classes and resources remain in memory; however,\\n          versions 24 and 25 still require the temporary Derby bootstrap class. The command targets execute\\n          a Windows or Linux command payload directly.\\n\\n          This module was successfully tested against:\\n          * PaperCut MF 26.0.4 (Build 76494) <-- emergency patch v1\\n          * PaperCut NG 26.0.4 (Build 76495) <-- emergency patch v1\\n          * PaperCut NG 26.0.3 (Build 76225)\\n          * PaperCut NG 25.0.11 (Build 75758)\\n          * PaperCut NG 24.1.9 (Build 73376)\", \"disclosure_date\": \"2026-08-27\", \"fullname\": \"exploit/multi/http/papercut_ng_external_user_lookup_rce\", \"is_install_path\": true, \"mod_time\": \"2026-09-02 10:28:21 +0000\", \"name\": \"PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb\", \"platform\": \"Java,Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/papercut_ng_external_user_lookup_rce\", \"references\": [\"CVE-2026-81578\", \"CVE-2026-82078\", \"URL-https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/\", \"URL-https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/\"], \"rport\": 9191, \"session_types\": false, \"targets\": [\"Java\", \"Windows Command\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:07.387308Z"}, {"uuid": "0761c680-1df5-4133-a854-d8325f0eba56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/jhuntinfosec.com/post/3mv3rjbzv722j", "content": "Hundreds of AI agents downloaded the advisory, the pre and post patch versions of the software, and built a lab to test the attack. Then went live against hundreds of identified victims vulnerable to CVE-2026-81578 and CVE-2026-82078", "creation_timestamp": "2026-09-09T14:43:07.243059Z"}, {"uuid": "8eb517da-5b0b-455e-9733-8474ecd9cf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mv3ui2vfzt2o", "content": "The AI swarm that breached 440 PaperCut servers\u00a0worldwide\n\nGreyNoise uncovered an AI-driven PaperCut attack that compromised 440 servers across 395 organizations in 48 countries using CVE-2026-81578 and CVE-2026-82078...\n\nhttps://thecybersecguru.com/news/ai-swarm-papercut-attack-440-servers/", "creation_timestamp": "2026-09-09T15:36:09.045385Z"}, {"uuid": "9b684979-3e7d-428f-86d7-ec8238c68755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dcoamsb2o", "content": "~Arcticwolf~\nChained flaws enable pre-auth SYSTEM RCE; patch immediately.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, Udydn[.]class\n-\n#CVE202681578 #CVE202682078 #ThreatIntel", "creation_timestamp": "2026-09-09T20:01:40.051106Z"}, {"uuid": "77076e8e-9cbf-4f25-9a3e-72ef96a2fd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82076", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:17:36.210583Z"}, {"uuid": "bf94429d-aa3e-4ad1-b05c-82f638c0346b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82074", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:17:31.624477Z"}, {"uuid": "d6483c62-c10b-47ac-940d-7e1eb6bf0ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82070", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:17:24.782168Z"}, {"uuid": "46423de0-6115-4ca4-af8d-5e2839a6af9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82071", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:17:26.960200Z"}, {"uuid": "782e8797-ec76-42e8-b4d2-ca3f762e6304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82073", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:17:29.146497Z"}, {"uuid": "647bf7fc-95df-4a92-bb7d-ab636883e0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82075", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:17:33.821121Z"}, {"uuid": "8ad7f3d4-b47f-42c6-aa4f-cd1c3abcb609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mv67ldjp372g", "content": "\ud83d\udce2 Exploitation IA \u00e0 grande \u00e9chelle de PaperCut via CVE-2026-81578 et CVE-2026-82078\n\nCet article pr\u00e9sente l'analyse technique d'une campagne d'exploitation active de serveurs PaperCut expos\u00e9s sur Internet, utilisant les\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#PaperCut #AIAssistedExploitation #Cyberveille", "creation_timestamp": "2026-09-10T14:00:07.858952Z"}, {"uuid": "dbbb62d9-771f-445f-8ce6-2b454fb2f673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82079", "type": "seen", "source": "https://bsky.app/profile/sundhaug.com/post/3mv6ya5sqyk2g", "content": "Responding here too because relevance and in case you missed it:\n\nCVE-2026-82079 being exploited using a ROP not affecting Switch 2 sounds like PAC at work, doesn't it?", "creation_timestamp": "2026-09-10T21:21:17.051390Z"}, {"uuid": "bb0f7c8c-c5d9-48df-999e-83b7400e9a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv76j2vg5s2l", "content": "Patch internet-facing PaperCut NG/MF now \u2014 CVE-2026-81578 + CVE-2026-82078 chain for pre-auth RCE, already used to breach 395 organisations worldwide. https://bleepingcomputer.com/news/security/ai-powered-attack-exploited-papercut-flaws-to-hack-395-organizations", "creation_timestamp": "2026-09-10T23:13:37.249501Z"}, {"uuid": "52d27348-6302-4edf-b7f9-1f462d899cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv7zabdnmq2x", "content": "Just another Tuesday in IT, where educational infrastructure across the UK, the US, and Europe gets trampled by hundreds of automated AI agents exploiting PaperCut NG/MF. Chaining CVE-2026-81578 authentication bypass with CVE-2026-82078 remote execution, these busy little bots br...\n\nRead full story", "creation_timestamp": "2026-09-11T07:11:52.844600Z"}, {"uuid": "dec6fd3a-c36e-4fb7-ac5d-e9ceb2f8e5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117251586510013041", "content": "PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam", "creation_timestamp": "2026-09-11T09:00:26.511808Z"}, {"uuid": "9d968b6d-4a70-491e-a388-95d8311b3b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mva7cgma652y", "content": "CRITICAL PaperCut NG/MF zero-days (CVE-2026-82078, CVE-2026-81578) exploited by AI-powered attacks. Remote code exec, credential theft, & domain admin access in 48 countries. Patch now: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #ZeroDa...", "creation_timestamp": "2026-09-11T09:00:29.245428Z"}, {"uuid": "d7ee7305-009c-40c2-84f5-fb985fd7876e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/true_secator/8602", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PaperCut \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 GreyNoise, \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0418\u0418 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043e\u0442\u0435\u043d \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-82078 \u0438 CVE-2026-81578, \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b 27 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043a\u0430\u043a O-day \u0438\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b\u00a0\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0432 WatchTowr \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u043a\u0440\u0443\u0433 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441\u0442\u043e\u044f\u0442 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 GreyNoise, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0418\u0418 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u0440\u043e\u0442\u0438\u0432 440 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 PaperCut NG/MF.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PaperCut \u0432 395 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0432 48 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0438 \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0415\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043d\u0435\u0441\u0442\u0438 \u043a \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u043e\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 28 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u043e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0418\u0418 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b \u0438 \u0434\u0430\u0436\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b.\n\n\u0423\u0441\u043f\u0435\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0431\u044b\u043b \u043d\u0435\u0440\u0430\u0432\u043d\u043e\u043c\u0435\u0440\u043d\u044b\u043c \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0434\u043e\u043c\u0435\u043d\u043e\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043b\u0438\u0448\u044c \u0432 12 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d \u043b\u0438 \u044d\u0442\u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0430\u043c, \u0438\u043b\u0438 \u0436\u0435 \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0446\u0435\u043b\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0443\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438: \u0441\u0431\u043e\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 LSASS \u0441 \u0445\u043e\u0441\u0442\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u043b\u0435\u043d\u0430\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a NoPac \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0433\u0440\u0443\u043f\u043f\u0443 Domain Admins, \u0435\u0441\u043b\u0438 \u0445\u043e\u0441\u0442 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 280 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445, \u043f\u043e\u0445\u0438\u0442\u0438\u043b\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e 137 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 12 \u0441\u043b\u0443\u0447\u0430\u044f\u0445.\n\n\u0418\u0437 440 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 204 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0438\u0437 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u0437 \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438/\u0443\u0441\u043b\u0443\u0433, \u043d\u0435\u0434\u0432\u0438\u0436\u0438\u043c\u043e\u0441\u0442\u0438/\u0433\u043e\u0441\u0442\u0438\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0418\u0422/MSP, \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430/\u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433.", "creation_timestamp": "2026-09-11T16:00:06.784024Z"}, {"uuid": "f12a4622-ef7f-4cd0-ab05-237fcae3cb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/true_secator/8602", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PaperCut \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 GreyNoise, \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0418\u0418 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043e\u0442\u0435\u043d \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-82078 \u0438 CVE-2026-81578, \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b 27 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043a\u0430\u043a O-day \u0438\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b\u00a0\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c.\n\n\u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 PaperCut NG/MF.\n\n\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0432 WatchTowr \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u043a\u0440\u0443\u0433 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441\u0442\u043e\u044f\u0442 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 GreyNoise, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0418\u0418 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u0440\u043e\u0442\u0438\u0432 440 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 PaperCut NG/MF.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PaperCut \u0432 395 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0432 48 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0438 \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0415\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043d\u0435\u0441\u0442\u0438 \u043a \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u043e\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 28 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u043e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0418\u0418 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u043c\u0438\u043d\u0443\u0442\u044b \u0438 \u0434\u0430\u0436\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b.\n\n\u0423\u0441\u043f\u0435\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0431\u044b\u043b \u043d\u0435\u0440\u0430\u0432\u043d\u043e\u043c\u0435\u0440\u043d\u044b\u043c \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0434\u043e\u043c\u0435\u043d\u043e\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043b\u0438\u0448\u044c \u0432 12 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d \u043b\u0438 \u044d\u0442\u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0430\u043c, \u0438\u043b\u0438 \u0436\u0435 \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0446\u0435\u043b\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0443\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438: \u0441\u0431\u043e\u0440 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 LSASS \u0441 \u0445\u043e\u0441\u0442\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0447\u043b\u0435\u043d\u0430\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a NoPac \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0433\u0440\u0443\u043f\u043f\u0443 Domain Admins, \u0435\u0441\u043b\u0438 \u0445\u043e\u0441\u0442 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 280 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445, \u043f\u043e\u0445\u0438\u0442\u0438\u043b\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e 137 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 12 \u0441\u043b\u0443\u0447\u0430\u044f\u0445.\n\n\u0418\u0437 440 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 204 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0438\u0437 \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438\u0437 \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438/\u0443\u0441\u043b\u0443\u0433, \u043d\u0435\u0434\u0432\u0438\u0436\u0438\u043c\u043e\u0441\u0442\u0438/\u0433\u043e\u0441\u0442\u0438\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0418\u0422/MSP, \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430/\u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433.", "creation_timestamp": "2026-09-12T00:00:37.955516Z"}, {"uuid": "1ef016e6-72cf-4bee-aa6d-85c93866dbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117258905363792667", "content": "We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @greynoise.  IP data in our Compromised Website reporting for 2026-09-11, tagged  'papercut-compromise'.\nDashboard Tree Map stats: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=other_value&day=2026-09-11&source=compromised_iot&source=compromised_website&source=compromised_website6&tag=papercut-compromise&data_set=count&scale=log&auto_update=on\nCompromised Website Report: https://www.shadowserver.org/what-we-do/network-reporting/compromised-website-report/\nThank you to @greynoise for the share! Background with info about the AI-orchestrated campaign behind the compromises (includes IOCs): https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf", "creation_timestamp": "2026-09-12T16:01:44.354594Z"}, {"uuid": "7da816a1-2b5c-4c22-ade6-5b92b0bba102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvdhexfqhc2q", "content": "We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @greynoise.io. IP data in our Compromised Website reporting for 2026-09-11, tagged  'papercut-compromise'.\n\nDashboard Tree Map stats: dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-12T16:03:05.936108Z"}, {"uuid": "a533753c-e805-47be-8d67-722e8c679fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvdhezufzs2q", "content": "We shared a one-off share of over 400 compromised PaperCut NG/MF instances (via CVE-2026-81578/CVE-2026-82078) observed by @greynoise.io. IP data in our Compromised Website reporting for 2026-09-11, tagged  'papercut-compromise'.\n\nDashboard Tree Map stats: dashboard.shadowserver.org/statistics/c...", "creation_timestamp": "2026-09-12T16:03:06.453619Z"}, {"uuid": "a4b06a04-5ef4-49dc-82c8-7040ef50be91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvekgmd3k72x", "content": "PaperCut SMR replaces all emergency patches for CVE-2026-81578 and CVE-2026-82078. AI-assisted attacks are active against hundreds of orgs\u2026 https://0daynews.com/articles/2026-09-11-papercut-smr-ai-attacks/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1732", "creation_timestamp": "2026-09-13T02:30:18.718216Z"}, {"uuid": "a2191895-3886-419a-8cfb-fe60243786e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvesvpak4y2d", "content": "Daily IT Security Digest \u2014 2026-09-13\norganizational fleets. [CTI.FYI](https://cti.fyi)\n\n5. **PaperCut NG/MF Hit by Actively Exploited Critical Zero-Days**\n   PaperCut NG and MF printing management software was struck by critical zero-day vulnerabilities (CVE-2026-82078, CVE-2026-81578) that enable", "creation_timestamp": "2026-09-13T05:01:55.227861Z"}, {"uuid": "9b70e7ad-b448-441c-961c-e03fba2d54c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvguqa2tdq2u", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-82078: An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG\nCVSS 9.1 \u00b7 EPSS 1.7% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-82078\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T00:39:58.107541Z"}, {"uuid": "609b9655-3086-456d-900b-b965acc81570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhul5canv2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-82078: An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG\nCVSS 9.1 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-82078\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T10:09:46.765622Z"}, {"uuid": "86ebebad-57a2-4f19-bda1-1bdbfd521823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhy2aw4uj2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-82078: An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG\nCVSS 9.1 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-82078\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T11:11:55.061343Z"}, {"uuid": "11c742d3-2033-425e-908a-6cc66e0478a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82079", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvi6qiv44c2y", "content": "Discover the dangerous Nintendo Switch QR code vulnerability (CVE-2026-82079) allowing hackers to execute code. Learn how system update 23.0.0 fixes it.\n\n#NintendoSwitch #CyberSecurity #CVE202682079 #QRCode #Vulnerability", "creation_timestamp": "2026-09-14T13:11:44.976657Z"}, {"uuid": "8769627b-1c85-4db8-92dc-ee0d987f43a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvi7deyez22u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-82078: An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG\nCVSS 9.1 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-82078\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T13:22:17.653764Z"}, {"uuid": "009b88da-ffd4-4817-aa7f-4661914af451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtv6h2kl2g", "content": "Daily IT Security Digest \u2014 2026-09-15\n# Daily IT Security Digest \u2014 2026-09-15\n\n## 1. PaperCut NG/MF Zero-Days Actively Exploited (CRITICAL)\n\nMultiple critical zero-day vulnerabilities (CVE-2026-82078, CVE-2026-81578) have been discovered in PaperCut NG and MF printing management software. Attackers", "creation_timestamp": "2026-09-15T05:02:49.550677Z"}, {"uuid": "b1e04154-7636-485d-be99-0ca166885396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvmedoqxog2w", "content": "Daily IT Security Digest \u2014 2026-09-16\nSEG should apply the patch immediately.\nSource: [OffSeq](https://infosec.exchange/@offseq/117274235646627417)\n\n## 3. PaperCut NG/MF Critical Zero-Days Impacting 440+ Deployments\n\nMultiple critical zero-day vulnerabilities (CVE-2026-82078, CVE-2026-81578) in", "creation_timestamp": "2026-09-16T05:02:42.734425Z"}, {"uuid": "f16025bb-bdcc-40e4-8ac3-cab589f74549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82079", "type": "seen", "source": "https://bsky.app/profile/5newshk.bsky.social/post/3mvnann653b2z", "content": "\u3010\u63d0\u9192\u3011Nintendo Switch \u767c\u73fe\u5b89\u5168\u6f0f\u6d1e CVE-2026-82079\n\nQR code \u9a57\u8b49\u6a5f\u5236\u51fa\u73fe\u554f\u984c\uff0c\u53ef\u80fd\u5c0e\u81f4\u88dd\u7f6e\u53d7\u653b\u64ca\u3002\u5efa\u8b70\u7528\u5bb6\u76e1\u5feb\u66f4\u65b0\u7cfb\u7d71\u7248\u672c\uff0c\u4ee5\u78ba\u4fdd\u8a2d\u5099\u5b89\u5168\uff0c\u9632\u6b62\u6f5b\u5728\u98a8\u96aa\u3002\n\n#NintendoSwitch #\u5b89\u5168\u6f0f\u6d1e #\u7cfb\u7d71\u66f4\u65b0", "creation_timestamp": "2026-09-16T13:29:14.703557Z"}, {"uuid": "6c003e9d-8533-43f8-9e1a-e417fe482977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82079", "type": "seen", "source": "https://bsky.app/profile/nesbot.bsky.social/post/3mvnq7gyhqq2w", "content": "[Sept 16, 2026] Nintendo Urges Switch Owners to Update Their Firmware After Security Exploit Discovered (CVE-2026-82079, fixed with firmware 23.0.0)\nwww.resetera.com/threads/16...", "creation_timestamp": "2026-09-16T18:07:38.062713Z"}, {"uuid": "be4349f1-5a5a-4aee-9ce0-138fde743644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvousudlml25", "content": "Daily IT Security Digest \u2014 2026-09-17\nvulnerabilities (CVE-2026-82078, CVE-2026-81578) in PaperCut NG/MF are being exploited in AI-driven attacks, enabling remote code execution, credential theft, and domain administrator escalation. Over 440 deployments have reportedly been affected. Organizations", "creation_timestamp": "2026-09-17T05:02:44.284728Z"}, {"uuid": "2151e49e-f548-4ead-910d-ef4976771ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76461: 16 interactions\nCVE-2026-82078: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-76460: 10 interactions\nCVE-2026-91843: 9 interactions\nCVE-2026-76461: 8 interactions\n", "creation_timestamp": "2026-09-17T06:36:26.311184Z"}]}