PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

PaperCut issued maintenance releases replacing emergency patches to fix two actively exploited vulnerabilities (CVE-2026-81578 and CVE-2026-82078) that allow authentication bypass and arbitrary code execution; a suspected Russian-speaking actor has weaponized these flaws to compromise at least 395 organizations across 48 countries using hundreds of AI agents, with activity attributed to IP 45.142.193.132 and heavy targeting of the U.S. education sector.