GoKawiilPaperCut issues second patch after first fix for exploited flaws was bypassed
PaperCut released a follow-up emergency update for PaperCut NG and MF after researchers found ways around its initial patch for actively exploited vulnerabilities. The company disclosed CVE-2026-82078, a critical unsafe dynamic class-loading bug, and CVE-2026-81578, a high-severity authentication bypass, which can be chained to let unauthenticated attackers execute code on vulnerable servers.
GoKawiil's interpretation of the reporting above, not reported fact.
Since the first patch failed to fully close the hole, organizations that already updated may still be exposed until they apply this new fix. Chaining an authentication bypass with arbitrary code execution gives attackers a straightforward path to full server compromise, making rapid patching and monitoring critical for print management deployments.
- Second emergency patch issued after bypasses of the first fix were found.
- CVE-2026-82078 (9.4) and CVE-2026-81578 (8.8) can be chained for unauthenticated remote code execution.
- Attacks were already occurring as zero-days before technical details were disclosed.
The Web Application Hacker's Handbook — Chained auth-bypass-to-RCE bugs like the ones hitting PaperCut servers are exactly the class of flaw this book dissects. It's a classic, hands-on guide to how web management interfaces get broken and how to defend them, useful for any admin scrambling to patch and harden their fleet.
See The Web Application Hacker's Handbook on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-28
Published there as: “PaperCut releases second emergency patch for exploited flaws”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.