PaperCut Flaws Exploited for Credential Theft

Attackers exploit PaperCut flaws CVE-2026-81578 and CVE-2026-82078 to steal credentials from schools and universities in the U.S. and Europe. Arctic Wolf observed post-exploitation activity including credential-harvesting tools and Meterpreter payloads. Users should restrict PaperCut servers from internet exposure.