Exploitation of PaperCut Vulnerabilities Leads to Credential Theft in Educational Institutions

Threat actors are exploiting newly disclosed PaperCut vulnerabilities (CVE-2026-81578 and CVE-2026-82078) to steal credentials from educational institutions in the U.S. and Europe through command execution, privilege escalation, and credential-harvesting tools.

Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe.

The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an authentication bypass and remote code execution chain – to conduct command execution and reconnaissance, as well as

Read original article