PaperCut Vulnerability Exploitation Campaign
On 28 August, The Hacker News reported that attackers were chaining two PaperCut flaws to execute code without authentication. Dev.to described an authentication bypass combined with dynamic class loading that created a pre-authentication remote-code-execution chain. Attackers were actively exploiting it.
PaperCut subsequently replaced its emergency patches with fixes for both flaws, according to The Hacker News. On 5 September, The Hacker News reported that attackers were exploiting the flaws to steal credentials from schools and universities.
Assuming the reporting is factual, the impact is 0%. The affected group includes schools, universities, and other operators running vulnerable PaperCut systems. Attackers are using a pre-authentication code-execution route for credential theft, and PaperCut’s full fixes have replaced its emergency patches.
Watch for further reporting that identifies the attackers, the number of compromised institutions, and whether exploitation continues after organizations deploy PaperCut’s fixes.
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers
<h1> From Query Access to Root of the Database: Inside the MarkLogic Privilege Escalation Chain </h1> <p>Privilege escalation is rarely a single step. In MarkLogic Server before
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked
<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts
Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →