PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
Reported exploitedPaperCut NGPaperCut MFOur summary
PaperCut has issued an urgent security advisory confirming that a zero-day vulnerability is being actively exploited in the wild against all versions of its PaperCut NG and PaperCut MF print management software. The vendor has released emergency patches for versions v25 and v26 to mitigate the threat, noting confirmed customer incidents while investigations continue. Since specific technical details regarding the exploit mechanism remain undisclosed, users are strongly advised to immediately restrict internet access to the PaperCut Application Server using firewall rules or network access controls.
The Hacker News publishes this story on its own site; we link to it rather than reprint it.
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.