ServiceNow and PaperCut Vulnerabilities Under Active Exploitation

ServiceNow has released patches for multiple vulnerabilities rated CVSS 10.0, indicating critical security flaws. Concurrently, the CVE-2026-82078 vulnerability in PaperCut has been confirmed as actively exploited in the wild, with CISA adding it to their KEV list on the same day. The PaperCut vulnerability allows remote code execution, posing significant risks to affected systems. Organizations using ServiceNow and PaperCut are urged to apply patches immediately to mitigate potential breaches. The scope of impact includes various sectors relying on these platforms, with high stakes for data integrity and system availability. Both vulnerabilities highlight the ongoing threat landscape and the necessity for timely updates and monitoring.

Key Points: • ServiceNow has patched multiple CVSS 10.0 vulnerabilities. • CVE-2026-82078 in PaperCut is actively exploited and added to CISA's KEV list. • Immediate patching is critical for organizations using affected systems.