Back Securityaffairs.Co

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

Securityaffairs.Co •Pierluigi Paganini • August 28, 2026

PaperCut warns that a zero-day in NG and MF is being exploited. The company already release emergency patches to address it. PaperCut Software warns that attackers are actively exploiting a zero-day in its NG and MF print management products. The flaw has no CVE yet, and the company has not released technical details. PaperCut issued […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PaperCut NG/MF Vulnerability Under Active Exploitation On August 27, 2026, PaperCut issued an urgent advisory regarding a zero-day vulnerability affecting its NG and MF print management software. This flaw allows unauthenticated attackers to execute arbitrary Java code remotely, compromising server configurations. Emergency patches have been released for versions 25 and 26, while version 24 patches are still pending. Organizations are advised to restrict public access to their PaperCut servers immediately. Reports indicate limited exploitation in the wild, with two confirmed incidents noted by Huntress. The vulnerability is currently being actively exploited, and the PaperCut security team is investigating further incidents. Indicators of compromise include suspicious activity from the pc-app.exe process and unusual log file modifications. 65 sources 73

Extracted Entities

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (2)