Back Feeds.4Sysops

PaperCut zero

Feeds.4Sysops •IT News • August 28, 2026

PaperCut has released emergency patches for an actively exploited zero-day affecting every version of its NG and MF print-management platforms. Administrators should immediately isolate internet-facing Application Servers, then install the patched v25 or v26 builds and investigate systems for signs of compromise. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PaperCut NG/MF Vulnerability Under Active Exploitation On August 27, 2026, PaperCut issued an urgent advisory regarding a zero-day vulnerability affecting its NG and MF print management software. This flaw allows unauthenticated attackers to execute arbitrary Java code remotely, compromising server configurations. Emergency patches have been released for versions 25 and 26, while version 24 patches are still pending. Organizations are advised to restrict public access to their PaperCut servers immediately. Reports indicate limited exploitation in the wild, with two confirmed incidents noted by Huntress. The vulnerability is currently being actively exploited, and the PaperCut security team is investigating further incidents. Indicators of compromise include suspicious activity from the pc-app.exe process and unusual log file modifications. 51 sources 73

Extracted Entities

PaperCut zero

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (3)