Hackers Exploit PaperCut NG/MF Flaws to Steal Credentials and Deploy Meterpreter

Threat actors are actively exploiting two recently disclosed vulnerabilities in PaperCut NG/MF servers, using the access to execute commands, harvest credentials, conduct reconnaissance, and deploy Metasploit Meterpreter payloads. Researchers Jens Pose and Ross Phillips observed attacks targeting PaperCut instances vulnerable to CVE-2026-81578 and...