Notorious Cybercrime Gang, FIN7, Lands Malware in Law Firm
esentire.com · Undated · Licence: not assessed; coordinator-only cache; do not redistribute
CVEs this report names
3 CVEs- CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityN-able · N-centralKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts7 reports14.6%Top 3.3%88.0priority
- CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPaperCut · NG/MFKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1098Account Manipulation1 report84.7%Top 0.29%83.7priority
- CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityPaperCut · NG/MFKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report63.0%Top 0.8%83.1priority
Where it names them
CVE-2026-18577 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
N-central Vulnerability (CVE-2026-18577) Under Exploitation
On August 2nd, 2026, N-able disclosed CVE-2026-18577, an authentication bypass vulnerability impacting N-central instances.
CVE-2026-81578 Original (opens in a new tab) ↗
PaperCut Discloses Zero-Day Vulnerabilities (CVE-2026-82078 and CVE-2026-81578)
CVE-2026-82078 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
PaperCut Discloses Zero-Day Vulnerabilities (CVE-2026-82078 and CVE-2026-81578)
The vulnerabilities are CVE-2026-82078 (CVSS: 9.4) and…
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.