PaperCut Issues Emergency Patch for Actively Exploited Flaw

PaperCut Software has issued an emergency security advisory warning that a critical vulnerability in its widely used print management software is being actively exploited by cybercriminals. The company confirmed on Thursday, August 27, 2026, that it is aware of confirmed customer incidents involving its PaperCut NG and PaperCut MF products and is treating the matter with the highest priority.

The vulnerability affects all versions of the software, which is commonly deployed by universities, corporations, and government agencies to manage printing from brands like Canon, Epson, and Xerox. PaperCut stated that its security team reproduced the flaw using information provided by a university customer. Emergency patches were released on Friday, August 28, to address the issue, which carries severity scores over 8.8 out of 10. The company urged all customers with internet-facing PaperCut Application Servers to immediately restrict web access to trusted IP addresses, even if no suspicious activity has been observed.

Cybersecurity firms confirmed evidence of exploitation. Huntress reported at least two of its customers were impacted. Jake Knott, head of threat intelligence at watchTowr,...