PaperCut NG/MF Vulnerability Actively Exploited in Attack

Cybersecuritynews •Guru Baran • August 27, 2026

PaperCut has confirmed that hackers are actively exploiting an unpatched vulnerability in its widely used PaperCut NG and PaperCut MF print management software, prompting the company to rush out an emergency patch just hours after issuing its first warning. The Australian vendor said its security response team is investigating “confirmed customer incidents” and is treating […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PaperCut NG/MF Vulnerability Under Active Exploitation On August 27, 2026, PaperCut issued an urgent advisory regarding a zero-day vulnerability affecting its NG and MF print management software. This flaw allows unauthenticated attackers to execute arbitrary Java code remotely, compromising server configurations. Emergency patches have been released for versions 25 and 26, while version 24 patches are still pending. Organizations are advised to restrict public access to their PaperCut servers immediately. Reports indicate limited exploitation in the wild, with two confirmed incidents noted by Huntress. The vulnerability is currently being actively exploited, and the PaperCut security team is investigating further incidents. Indicators of compromise include suspicious activity from the pc-app.exe process and unusual log file modifications. 51 sources 73

PaperCut NG/MF Vulnerability Actively Exploited in Attack

The full story

Extracted Entities

Attack Types (1)

Platforms (2)