PaperCut NG and MF Affected by Zero-Day Attack

PaperCut has informed its customers that a zero-day security vulnerability is actively being exploited in all versions of its PaperCut NG and PaperCut MF print management software. The vulnerability affects both versions v25 and v26. The company has promptly released an emergency patch to address the flaw. PaperCut has classified the vulnerability as critical. The company has confirmed that there are already confirmed incidents among customers affected by this vulnerability.

PaperCut is treating the matter with the utmost priority and recommends that all users install the update immediately. The exact nature of the vulnerability has not been detailed by PaperCut. However, experts suspect that the flaw may allow attackers to gain unauthorized access to print jobs and potentially sensitive data. This could have significant implications for the data security of companies that rely on this software. The affected versions of PaperCut NG and MF are in use in many organizations worldwide.

The software is commonly used in educational institutions, businesses, and public facilities to manage printing resources and control costs. PaperCut's swift response to the discovery of the vulnerability underscores the urgency of the situation. IT security experts advise updating the software immediately to minimize the risk of an attack. Installing the emergency patch should be part of regular security practices in organizations. The vulnerability could also impact the compliance requirements of many companies that are legally obligated to protect personal data.

PaperCut has announced that further information regarding the vulnerability and the measures taken will be provided in the coming days. The company plans to release regular updates to keep customers informed about the status of the security situation. Communication with affected customers has already begun. The vulnerability has been registered as CVE-2026-XXXX, with the exact CVE number yet to be published. The security community is closely monitoring the situation, as similar vulnerabilities in the past have led to widespread security incidents.

Organizations should review their security protocols and ensure that all systems are up to date. PaperCut's response to the vulnerability is seen as crucial for maintaining customer trust in the software. The rapid deployment of a patch is an important step in ensuring the integrity of systems. Customers are encouraged to follow all security policies and report any suspicious activities. The vulnerability could potentially affect thousands of companies that rely on PaperCut.

The exact number of affected systems is currently unknown; however, it is estimated that the software is used in over 50,000 facilities worldwide. The urgency of the situation requires immediate action from all users of the software. PaperCut is committed to continuously improving the security of its products and will conduct further security reviews in the coming weeks. Customers are urged to regularly monitor their systems and ensure that all security updates are installed promptly. The emergency patch was released on August 30, 2026, and PaperCut has already begun informing affected customers about the necessary steps.