Security1 hOctober 10, 2026, 04:23

PaperCut flaws enable pre-auth RCE, active exploitation reported

A chain of PaperCut vulnerabilities (WT-2026-0141-0144 / CVE-2026-82077, CVE-2026-82078, CVE-2026-81578) allows pre-authentication remote code execution. Exploitation is already active and some vendor patches can be bypassed due to architectural weaknesses.

DEV Community

Open source

CVE-2026-82077: insufficient input validation in print jobs
CVE-2026-82078: buffer overflow in the print spooler service
CVE-2026-81578: privilege escalation to system level
Exploits run pre-auth and bypass issued patches

#PaperCut

CISA adds two PaperCut flaws to exploited vulnerabilities catalog

Security

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Security

Working exploit published for pre-auth AnyDesk Linux flaw giving root access

Security

PaperCut flaws enable pre-auth RCE, active exploitation reported

CISA adds two PaperCut flaws to exploited vulnerabilities catalog

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Working exploit published for pre-auth AnyDesk Linux flaw giving root access

F5 patches exploited BIG-IP APM zero-day enabling RCE