PaperCut NG/MF

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 8, 2026
Last mentionedSep 11, 2026

Timeline

4 articles · newest first

Metasploit Wrap Up: This One Goes to Sixteen!

Metasploit adds 16 modules including 10 exploits, five covering CISA KEV vulnerabilities in Cisco, SonicWall, PaperCut, JetBrains and Langflow.

Rapid7 BlogSep 11, 13:35 UTC · Sep 11, 2026ToolsExploitedCVE-2025-66516 CVE-2025-54988 CVE-2026-20929+810 · 7 reads

AI agents exploited PaperCut flaws to breach 395 organizations

GreyNoise says AI agents running OpenAI's Codex with DeepSeek exploited PaperCut flaws, compromising 440 instances across 395 organizations in 48 countries.

Help Net SecuritySep 11, 10:05 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-81578 CVE-2026-820783 · 1 read

Hackers Use Hundreds of AI Agents to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide

A Russian-speaking actor used hundreds of AI agents to exploit PaperCut flaws, compromising 440 servers across 395 organizations in 48 countries.

Cyber Security NewsSep 9, 14:40 UTC · Sep 9, 2026Threat actorExploitedCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+15 · 2 reads

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded FutureSep 8, 00:00 UTC · Sep 8, 2026VulnerabilityExploitedCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+44 · 2 reads

Related CVEs

by mentions

CVE-2026-8207863%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157885%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2026-7289899%10.0
Unauthenticated SQL Injection in Metabase Grants Admin Access
published Aug 10, 2026MetabaseKEVPoC ×3
CVE-2025-6259360%9.4
Actively Exploited Browser-Based RCE in Ray AI Compute Engine
published Nov 26, 2025Ray-Project (Anyscale) RayKEVPoC
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2021-4227873%7.5
Privilege Escalation via sAMAccountName Spoofing in Microsoft Active Directory
published Nov 10, 2021microsoft Windows Server 2004 (AD DS)KEVRansomware
CVE-2021-4228777%7.5
Privilege Escalation in Microsoft Active Directory Domain Services
published Nov 10, 2021microsoft windows server 2004KEVRansomware
CVE-2026-2374468%9.8
Unauthenticated RCE in MCPJam Inspector via crafted HTTP requests
published Jan 16, 2026mcpjam inspectorPoC ×3
CVE-2026-598002%9.2
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint (this route is not…
published Jul 7, 2026
CVE-2025-5498815%8.4
Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML…
published Aug 20, 2025apache tika

Appears with

PaperCutvendor · 4
DeepSeekai model · 3
DeepSeekvendor · 2
CISAorganization · 2
OpenAIvendor · 2
GreyNoiseorganization · 2
Metabaseproduct · 1
Certipyproduct · 1
Rubeusproduct · 1
Zimbravendor · 1
IBM Langflowproduct · 1
IBM Langflowvendor · 1
Cisco Secure Firewall Management Centerproduct · 1
Insikt Grouporganization · 1
SonicWallvendor · 1
sudoproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.