KNOWN EXPLOITED VULNERABILITY DOSSIER

CVE-2026-82078

PaperCut · NG/MF

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained with CVE-2026-81578.

CISA KEV Added: 2026-08-31
Severity Rating: High (CVSS 9)
Legal Indictments: 0 Cases
Catalog Status: Active KEV Mandate

Correlated Federal Court Cases & Exploitation Context (0)

No federal court indictment in the current archive directly cites CVE-2026-82078. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-08-31.

Associated Government Advisories

Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.

← Back to All CVEs Explore ATT&CK Matrix →