Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)

Reported by watchTowr Labs (Piotr Bazydlo (@chudyPB))

Summary by Cyber Security News9 Oct 2026, 19:31 CEST

About this summary. This is a short, independently written summary of an article first published by watchTowr Labs. Cyber Security News did not report or verify the underlying story. Read the original: https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) — Image: watchTowr Labs

Before we begin, yes - it's confusing. There are more vulnerabilities with watchTowr IDs in this blog post than there are CVE IDs (assigned by PaperCut), due to PaperCut bundling vulnerabilities and then patch bypasses for those same vulnerabilities into singular CVE IDs.Paper! It still exists.

Read the full article at watchTowr Labs →

Source attribution: headline and facts are from watchTowr Labs (labs.watchtowr.com). Summary method: excerpt of the source description. See our source attribution policy.