Will PaperCut NG/MF zero-day be added to CISA KEV by end of September 2026?
[Auto-closed — deadline passed with no qualifying event] Market deadline was 2026-10-01. Today is 2026-10-04 (3 days past deadline). Resolution required CVE(s) associated with the PaperCut NG/MF zero-day to appear in CISA's Known Exploited Vulnerabilities catalog by Sept 30, 2026, confirmed by official CISA KEV listing. Recent CISA alerts reviewed do not include PaperCut NG/MF CVE in newly published KEV entries. CISA's latest bulletin (Oct 2) lists Zammad CVEs and other vulnerabilities but not PaperCut.
Evidence: https://threatodds.com/markets/69b1a794-6487-4264-9d5d-20a5ba8f51c9Market Overview
AI GENERATEDPaperCut warns of active zero-day exploitation in PaperCut NG and MF print management software (Bleeping Computer). Hackers are actively exploiting the vulnerability in real attacks.
Primary SourceResolution Criteria
CVE(s) associated with the PaperCut NG/MF zero-day appear in CISA's Known Exploited Vulnerabilities catalog by Sept 30, 2026, confirmed by official CISA KEV listing.