CVE-2026-82078

Named by 4 kept items in this workspace.

Search every workspace for CVE-2026-82078. It matches the name as written, so it can find other things that share it.

The items that name it 4

Dark Web Intelligence (@DailyDarkWeb) on X
thread2026-10-12It is written here as CVE-2026-82078: used with CVE-2026-81578 in the August in-the-wild attacks.
Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
writeup2026-10-09It is written here as CVE-2026-82078 (Post-Auth RCE exploited in the wild in 26.0.3, based on controlling the JDBC connection URL).
Post-Auth RCE exploited in the wild in 26.0.3, based on controlling the JDBC connection URL
Metasploit Wrap Up: This One Goes to Sixteen!
article2026-09-11
Part of the PaperCut NG/MF unauthenticated RCE exploit chain (with CVE-2026-81578), exploited by new module papercut_ng_external_user_lookup_rce; reported as a zero-day actively exploited in the wild
PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE
advisory2026-08-28
Unsafe dynamic class-loading vulnerability in the database connection utilities that can be used to execute arbitrary Java bytecode. Chained with CVE-2026-81578 to enable pre-authentication remote code execution in the PaperCut Application Server.

All cves in this workspace.