PaperCut 25.X.X didn’t get found. It got chained. CVE after CVE until the Application Server opened its throat, remote code execution, no creds, then full SYSTEM / root on the box. Ai000 Cybernetics QLab put it on the table. Entertaining? Yeah. For the people holding the chain. Thanks to the ACQL vCERT folks who put this together. Laboratory demo. Not weaponized. Proof of chain only.

@aioooir | #vuln_hunting #vcert_acql