CVE-2026-81578 (CVSS 8.8) + CVE-2026-82078 (CVSS 9.4) can be chained from unauthenticated configuration manipulation to arbitrary Java code execution.
The interesting part: the initial emergency patch was bypassed, leading to Emergency Patch Release 2.
My technical breakdown covers the exploit chain, Udydn.class, Derby/JDBC activity, IOCs, Sigma/YARA detection, and incident-response steps.

]]>https://forum.ieu.app/topic/ea7dc0ea-ab6a-4804-83d3-1ef97eba1bcd/papercut-ng-mf-pre-auth-rce-chain-is-being-actively-exploited.RSS for NodeSat, 05 Sep 2026 18:40:12 GMTSat, 29 Aug 2026 05:43:23 GMT60