Will PaperCut NG/MF zero-day exploits (CVE-2026-81578, CVE-2026-82078) lead to 10+ documented data theft incidents by end of September 2026?

Recently patched PaperCut zero-days (now in CISA KEV) are already being abused in data theft attacks, per Bleeping Computer. The question asks whether post-patch exploitation will result in 10+ documented incidents by September 2026.

Resolution Criteria

Public disclosure from victim organizations, incident response reports, or threat intelligence vendors (CrowdStrike, Mandiant, etc.) documenting at least 10 distinct PaperCut data-theft incidents using CVE-2026-81578 or CVE-2026-82078.