The initial fixes were found to be insufficient, as attackers could still reach the vulnerable code paths through alternate means. This prompted the vendor to issue another out-of-band update to close the remaining loopholes. The flaws are being leveraged in real-world attacks, making immediate deployment critical for administrators running affected versions.

• Affected products: PaperCut NG and PaperCut MF
• Priority: Apply the latest emergency patch immediately
• Action required: Update all internet-facing and internal print servers without delay

The new patches are available through the standard PaperCut update mechanism. Organizations that have not yet applied the first emergency update should install this latest version directly, as it supersedes the previous one. Administrators are also advised to review their print server logs for any signs of unauthorized access or suspicious activity linked to these exploits.

Source: Unknown

Is your team planning to fast-track this second patch, or are you waiting to see if further bypasses emerge before updating your print servers?