{"schema":"vulnpedia.poc/1","cve":"CVE-2026-81578","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-08-31","ransomware":false},"epss":{"score":0.83729,"percentile":0.99685},"cvss":{"version":"4.0","score":8.8,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb","executable":true,"sourceId":"exploit/multi/http/papercut_ng_external_user_lookup_rce","description":"PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)","verification":"catalogued","source":"metasploit","modified":"2026-09-02 10:28:21 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/papercut_ng_external_user_lookup_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/papercut_ng_external_user_lookup_rce","modified":"2026-09-02 10:28:21 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_external_user_lookup_rce.rb"}]}],"poc_candidates":[{"url":"https://github.com/yora1928/PaperCut-CVE-2026-81578-82078","source":"poc-in-github","sourceId":"CVE-2026-81578","description":"Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078","modified":"2026-09-09T14:58:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-81578","url":"https://github.com/yora1928/PaperCut-CVE-2026-81578-82078"},{"source":"poc-in-github","sourceId":"CVE-2026-81578","modified":"2026-09-09T14:58:15Z","url":"https://github.com/yora1928/PaperCut-CVE-2026-81578-82078"}],"tags":[]},{"url":"https://github.com/virologi-info/papercut-toolkit","source":"poc-in-github","sourceId":"CVE-2026-81578","description":"#PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit 2 3 A **defensive** toolkit to check and understand exposure to the chained","modified":"2026-09-05T13:59:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-81578","url":"https://github.com/virologi-info/papercut-toolkit"},{"source":"poc-in-github","sourceId":"CVE-2026-81578","modified":"2026-09-05T13:59:56Z","url":"https://github.com/virologi-info/papercut-toolkit"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-81578 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-81578/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-81578.yaml","template":"http/cves/2026/CVE-2026-81578.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-81578%22&type=repositories","executable":false}]}