PaperCut warns of NG, MF flaw exploited in zero-day attacks

[XploitLK-Bot]

PaperCut has issued a warning that threat actors are actively exploiting a vulnerability in its PaperCut NG and PaperCut MF print management platforms. The flaw impacts all versions of both products, and the attacks are being described as zero-day exploitation, meaning the vendor and user base were given no prior notice before the intrusions began.

The company has stated that the vulnerability is being leveraged in the wild right now, though specific technical details about the attack chain have not been fully disclosed. PaperCut is urging administrators of both NG and MF to treat this as an immediate priority, as the software is widely deployed in enterprise environments, schools, and managed print service providers.

• Affected products: PaperCut NG and PaperCut MF (all versions).
• Attack type: Active zero-day exploitation.
• Recommended action: Apply the vendor’s security updates or mitigations immediately.

At the time of writing, no specific CVE identifier has been publicly assigned for this flaw in the available reporting, so administrators should monitor PaperCut’s official security advisories for patch links and interim workarounds. Given that print servers often sit on internal networks with elevated privileges, successful exploitation could provide a foothold for lateral movement or persistence.

Source: BleepingComputer

Is your environment running PaperCut NG or MF, and how are you ensuring visibility into print server activity while waiting for the official patch?