# PaperCut CVE-2026-82077 (post-authentication RCE, fixed in 26.0.5) is added to the CISA KEV catalog on or before 2027-01-11.

- **Artifact ID:** SO-2026-008
- **Status:** OPEN
- **Public record:** https://record.cybersecurityhq.com/forecasts/so-2026-008
- **Machine-record SHA-256:** `548ae96f99447d197da02c2e195490b36f2a3f9464dbf874d68e3b8c1f83d70b`

## Complete structured record

```json
{
  "id": "SO-2026-008",
  "class": "EVIDENCE_PUBLICATION",
  "claim": "PaperCut CVE-2026-82077 (post-authentication RCE, fixed in 26.0.5) is added to the CISA KEV catalog on or before 2027-01-11.",
  "issued": "2026-10-13T12:30:00Z",
  "probability": 0.3,
  "benchmark": 0.25,
  "benchmark_kind": "ANALYST_PRIOR",
  "benchmark_basis": "Judgment. Post-auth flaw at a product with two exploited sibling flaws and public research; no exploitation stated. Post-auth flaws reach the catalog less often than pre-auth.",
  "adjustment": 0.05,
  "resolution_rule": "YES if CISA KEV lists CVE-2026-82077 with dateAdded on or before 2027-01-11.",
  "admissibility": "Only publications dated after 2026-10-13T12:30Z count; for EVENT-class, only events occurring after that timestamp count. Evidence pre-dating issuance resolves the forecast RETROSPECTIVE_DISCOVERY, not YES.",
  "exclusions": null,
  "resolves": "2027-01-11",
  "status": "OPEN",
  "outcome_date": null,
  "outcome_basis": null,
  "brier": null,
  "benchmark_brier": null,
  "resolution_source": "EXTERNAL",
  "experimental": true,
  "false_positive_cost": "Over-forecast would overstate pivot-to-sibling-flaw behavior.",
  "ledger_hash": "95bec1474991f096",
  "revision_log": [],
  "record_links": []
}
```