Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Coverage across the spectrum
How we rate outletsThe story so far
Attackers are targeting the education sector in the U.S. and Europe by exploiting newly disclosed PaperCut flaws to facilitate credential theft.
The exploited flaws, CVE-2026-81578 and CVE-2026-82078, allow for authentication bypass and remote code execution, enabling command execution, reconnaissance, and creation of privileged accounts.
- The flaws are being used to target schools and universities in the U.S. and Europe.
- The U.S. CISA has added the flaws to its Known Exploited Vulnerabilities catalog.
Who's reporting it
- THThe Hacker NewsCenter
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
- SASecurity AffairsCenter
U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog
- CDCybersecurity DiveCenter
PaperCut issues emergency patches as threat actors target chained vulnerabilities
- CDCyber DailyCenter
PaperCut exploitation continues to worsen as company releases third emergency patch
- securityweek.comSsecurityweek.comCenter
PaperCut Exploitation Escalates to Active Intrusions
Why it matters
The education sector is a critical infrastructure, and the theft of credentials can have significant consequences for students, faculty, and staff
- Potential further exploitation of the flaws, leading to additional credential theft and unauthorized access
Reader Discussion
Loading comments…




