CISA KEV: CVE-2026-81578 — PaperCut NG/MF actively exploited

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability. PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CIS