ThreatRoundup

CVE Watch

Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to Bluesky as they appear.

All High & Critical Critical High Exploited (KEV) Public exploit

  • Critical CVSS 9.4 KEV Public exploit EPSS 63.5% Remote Attacker IOCs PaperCut

    CVE-2026-82078: PaperCut NG/MF (Critical, CVSS 9.4)

    An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against…

    Published Aug 28, 2026

  • High CVSS 8.8 KEV Public exploit EPSS 85.6% Remote Attacker IOCs PaperCut

    CVE-2026-81578: PaperCut NG/MF (High, CVSS 8.8)

    An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to…

    Published Aug 28, 2026