PaperCut NG and MF Zero-Day Exploitation Reported in the Wild

PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. According to a security advisory published by the vendor, the flaw enables remote code execution through crafted HTTP requests directed at print management servers. The advisory notes that exploitation has been observed in the wild prior to full disclosure, and technical details of the vulnerability remain limited. PaperCut has stated that no official patch is available at the time of the advisory and has recommended that organizations immediately segment their PaperCut servers on isolated networks, disable unnecessary services, and monitor for suspicious activity. The company has attributed the exploitation to threat actors but has not named specific groups. The scope of affected versions and the full extent of the attack chain are still under investigation. BleepingComputer first reported on the advisory, noting that the lack of a timely fix increases the risk of ransomware delivery and unauthorized access to sensitive print infrastructure.