Critical Analysis: CVE-2026-81578 - PaperCut NG/MF Missing Authentication for Critical Function ... — September 1, 2026

Published 01 Sep 2026 · vulnerability management, CVE analysis, threat intelligence, security operations, cybersecurity news

CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function – A Deep Dive Well, here we are again, September 1st, 2026, and another critical vulnerability has dropped, this time impacting PaperCut NG/MF installations. CVE-2026-81578, a "Missing Authentication for Critical Function" vulnerability, has just been published, and it’s one we need to dissect immediately. From where I'm sitting, this isn't just another patch Tuesday item; it's a stark reminder of how seemingly innocuous application functions can become vectors for severe compromise when foundational security principles are overlooked. Initial Discovery and Context The initial discovery, as often is the case, came from a combination of diligent security research and, reportedly, some internal testing by PaperCut itself after a tip-off. The vulnerability impacts PaperCut NG and MF versions 23.0.x prior to 23.0.8,