PaperCut releases second emergency patch for exploited flaws
PaperCut releases second patch for exploited print management software flaws.
Run PaperCut?
Get an email when a reviewed story names PaperCut, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
PaperCut has issued a second emergency patch for its NG and MF print management software to address two actively exploited vulnerabilities. Researchers discovered methods to bypass the initial fixes, necessitating further hardening. The vulnerabilities, CVE-2026-82078 and CVE-2026-81578, allow for authentication bypass and remote code execution.
The lesson from this incident
Full lessonPaperCut was forced to issue a second emergency patch after researchers discovered that the initial fix for two actively exploited vulnerabilities — an authentication bypass (CVE-2026-82078) and a remote code execution flaw (CVE-2026-81578) — could be bypassed. This illustrates a critical risk in reactive patching: rushing a fix to production without thorough regression and bypass testing can leave organizations with a false sense of security. Attackers actively monitor patched vulnerabilities for bypass opportunities, meaning incomplete fixes can be just as dangerous as no patch at all. Organizations that applied the first patch but delayed the second remain exposed, underscoring the need for continuous vulnerability monitoring even after patching.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
- cve — CVE-2026-82078
- cve — CVE-2026-81578