THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82078 (CRITICAL 9.1) — An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an att

[NVD] CVE-2026-82078 (CRITICAL 9.1) — An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an att

mednvdPublished 2026-08-28

CVE-2026-82078 CVSS: 9.1 CRITICAL Published: 2026-08-28T16:18:31.240

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration paramete

Indicators of compromise

CVE-2026-82078cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82078