Paper Cut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
Summary: PaperCut has warned that attackers are actively exploiting a zero-day vulnerability affecting all versions of its PaperCut NG and MF print management software, and has released an emergency patch for v25 and v26. The company said it is aware of confirmed customer incidents and is treating the matter with the highest priority, while the flaw itself, the exploitation method, and the attackers remain undisclosed.
What you should know: PaperCut is advising customers to restrict internet access to the NG/MF Application Server immediately, even without signs of suspicious activity, because the same product line was exploited in 2023 through CVE-2023-27350 (CVSS 9.8) by Russian threat actors and the Lace Tempest group to deliver Cl0p and LockBit ransomware.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-27350CVE-2026-81578CVE-2026-82078
- Related