Multiple Vulnerabilities in PaperCut Products Could Allow for Remote Code Execution

Multiple vulnerabilities in PaperCut products allow unauthenticated remote actors to trigger administrative backend actions and, in a separate flaw, to execute Java bytecode via unsafe dynamic class loading, potentially resulting in remote code execution (CVE-2026-81578, CVE-2026-82078). Impact depends on service account privileges; devices not exposed to the public Internet have reduced exploitation risk.