<![CDATA[PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions]]>

<![CDATA[PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions]]>PaperCut has issued an urgent security advisory after confirming that threat actors are actively exploiting a vulnerability in its print management software. The flaw impacts all versions of both PaperCut NG and PaperCut MF, and the company has acknowledged verified customer incidents, stating it is treating the matter with the highest priority.

The zero-day is being leveraged in live attacks, prompting the vendor to release an emergency patch targeting versions v25 and v26. Customers running any prior version are strongly advised to upgrade immediately to a patched release to mitigate exposure.

Affected products:

PaperCut NG (all versions prior to the emergency patch)
PaperCut MF (all versions prior to the emergency patch)

Mitigation steps:

Apply the latest emergency patch provided by PaperCut for v25 and v26.
If you are running an older version, upgrade to a supported, patched build without delay.
Monitor your print server logs for suspicious activity or unauthorized access attempts.
Restrict network access to PaperCut servers where possible.

At this time, the vendor has not released detailed technical specifics about the vulnerability, but the active exploitation indicates a serious risk for organizations that rely on PaperCut for print management. Administrators should treat this as a priority and not delay patching.

Source: The Hacker News

Are any of you running PaperCut in your environment, and how quickly are you able to roll out the emergency patch?

]]>https://xploitlk.com/topic/148/papercut-zero-day-exploited-in-attacks-affecting-all-ng-and-mf-versionsRSS for NodeSat, 05 Sep 2026 13:29:18 GMTSun, 30 Aug 2026 00:30:28 GMT60