Serial number: AV26-858
Date: August 28, 2026
Updated: August 31, 2026
As of August 27, 2026, PaperCut is affected by vulnerabilities in the following products:
- PaperCut MF
- Prior to v24 Emergency Patch Release 2
- Prior to v25 Emergency Patch Release 2
- Prior to v26 Emergency Patch Release 2
- PaperCut NG
- Prior to v24 Emergency Patch Release 2
- Prior to v25 Emergency Patch Release 2
- Prior to v26 Emergency Patch Release 2
Update 1
Open-source reporting indicates that CVE-2026-81578 and CVE-2026-82078 are related to PaperCut MF and PaperCut NG are being exploited in the wild.
Update 2
On August 31, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-81578 and CVE-2026-82078 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.