PaperCut Zero-Days Exploited to Deploy AdaptixC2 and Compromise Active Directory

Attackers exploited two PaperCut zero-day vulnerabilities to deploy AdaptixC2 malware and compromise an education organization’s Active Directory environment. Threat Response Unit detected the intrusion on August 31, 2026, after attackers breached an internet-facing print server running PaperCut MF version 24.0.2, build 69746. The vulnerabilities, tracked as CVE-2026-82078 and CVE-2026-81578, affect PaperCut NG and MF. They involve unsafe Java class loading and improper…

Diamond Model