{"uuid": "a211036a-5d77-4e15-bca7-c100e0b17b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82078", "type": "exploited", "source": "https://t.me/P0x3k_1N73LL1G3NC3/427", "content": "Exploit module for the recent PaperCut MF/NG 0day (CVE-2026-81578 + CVE-2026-82078)\n\nModule supports both MF and NG editions, and all supported product versions 26.x, 25.x, 24.x. Bypasses vendor emergency patch v1. Emergency patch v2 successfully remediates the chain. Module also has platform agnostic Java payload support (and that will be in-memory on 26.x targets), along with OS command based payloads.\n\nBlog: https://www.rapid7.com/blog/post/etr-papercut-ng-mf-critical-zero-day-exploited-in-the-wild/", "creation_timestamp": "2026-09-02T01:05:08.935687Z"}