PaperCut CVE-2026-82078 & CVE-2026-81578: Zero-Day RCE Chain Exploited | CyberHawk Threat Intel

Attackers chain PaperCut CVE-2026-81578 (auth bypass) and CVE-2026-82078 (unsafe class loading) for unauthenticated RCE. A second emergency patch followed watchTowr bypasses.

2026-08-31T22:39:32.116Z

Rudra Verma, Senior Security Architect & Researcher