Vulnerabilities

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute…

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained with CVE-2026-81578.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Oracle

Product

java

CISA KEV

listed

Exploitation

observed in the wild

Fix

available

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-82078 on this site · NVD · CVE.org · Vulnpedia · KEV

Other items that share a CVE or were clustered with this one.

1. 16
   watchTowr Labs watchTowr 22d ago

   Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)

   CVE-2026-82077CVE-2026-82078CVE-2026-81578+3 more
2. 16
   Research Insikt Group 8 Sep 2026

   August 2026 CVE Landscape

   CVE-2025-62593CVE-2026-72898CVE-2026-9198+57 more
3. 35
   CISA advisory CISA 31 Aug 2026

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-81578CVE-2026-82078