[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0HSSaR4_dghR5VTOExJzBolgCs7JPYbzWC17FvVcE0I":3},{"article":4,"iocs":47,"watch_terms":55,"solutions":56,"lesson":157},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"d8861308-47c7-4498-93e4-3e43a2f019dd","PaperCut releases second emergency patch for exploited flaws","papercut-releases-second-emergency-patch-for-exploited-flaws-4543cc","PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. [...]","PaperCut has issued a second emergency patch for its NG and MF print management software to address two actively exploited vulnerabilities. Researchers discovered methods to bypass the initial fixes, necessitating further hardening. The vulnerabilities, CVE-2026-82078 and CVE-2026-81578, allow for authentication bypass and remote code execution.","PaperCut releases second patch for exploited print management software flaws.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fpapercut-releases-second-emergency-patch-for-exploited-flaws\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2023\u002F04\u002F19\u002Fpapercut-jeader.jpg","2026-08-28T19:08:26+00:00","2026-08-28T20:00:09.417147+00:00",8,[17,20,22,25,27],{"name":18,"type":19},"PaperCut NG","product",{"name":21,"type":19},"PaperCut MF",{"name":23,"type":24},"PaperCut","vendor",{"name":26,"type":19},"Print Deploy",{"name":28,"type":19},"Mobility Print","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,42],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[48,52],{"type":49,"value":50,"context":51},"cve","CVE-2026-82078","Critical unsafe dynamic class-loading flaw",{"type":49,"value":53,"context":54},"CVE-2026-81578","High-severity authentication bypass vulnerability",[23,18,21],{"controls":57,"vendors":145},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":117,"name":118,"problem":119,"products":120},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",[146,152],{"slug":147,"name":148,"logo_path":149,"roles":150},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png",[151],"reported_by",{"slug":153,"name":154,"logo_path":155,"roles":156},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png",[151],{"slug":158,"title":159,"body":160,"framework_refs":161,"framework_notes":172},"papercuts-repeated-emergency-patches-highlight-patch-validation-failures","PaperCut's Repeated Emergency Patches Highlight Patch Validation Failures","PaperCut was forced to issue a second emergency patch after researchers discovered that the initial fix for two actively exploited vulnerabilities — an authentication bypass (CVE-2026-82078) and a remote code execution flaw (CVE-2026-81578) — could be bypassed. This illustrates a critical risk in reactive patching: rushing a fix to production without thorough regression and bypass testing can leave organizations with a false sense of security. Attackers actively monitor patched vulnerabilities for bypass opportunities, meaning incomplete fixes can be just as dangerous as no patch at all. Organizations that applied the first patch but delayed the second remain exposed, underscoring the need for continuous vulnerability monitoring even after patching.",[162,163,164,165,166,167,168,169,170,171],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST AC-17: Remote Access","NIST SC-7: Boundary Protection","ITIL Change Management: Emergency Change Procedures","ISO 27001 A.12.6.1: Management of Technical Vulnerabilities",{}]