PaperCut Warns of Actively Exploited Vulnerability Affecting NG and MF Servers

Gbhackers •Divya • August 28, 2026

PaperCut has issued an urgent security advisory after confirming the active exploitation of a vulnerability affecting all versions of its PaperCut NG and PaperCut MF print-management servers. Organizations with Application Servers exposed to the internet are urged to immediately restrict web access to trusted internal IP addresses and deploy emergency updates for versions 25 and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PaperCut NG/MF Vulnerability Under Active Exploitation On August 27, 2026, PaperCut issued an urgent advisory regarding a zero-day vulnerability affecting its NG and MF print management software. This flaw allows unauthenticated attackers to execute arbitrary Java code remotely, compromising server configurations. Emergency patches have been released for versions 25 and 26, while version 24 patches are still pending. Organizations are advised to restrict public access to their PaperCut servers immediately. Reports indicate limited exploitation in the wild, with two confirmed incidents noted by Huntress. The vulnerability is currently being actively exploited, and the PaperCut security team is investigating further incidents. Indicators of compromise include suspicious activity from the pc-app.exe process and unusual log file modifications. 51 sources 73

Extracted Entities

Platforms (2)

PaperCut MF PaperCut NG