PaperCut Releases Second Emergency Patch for Security Vulnerabilities

On August 31, 2026, PaperCut released a second emergency security update for its print management software PaperCut NG and MF. This update addresses two actively exploited security vulnerabilities that could not be fully resolved previously. Researchers had discovered several methods to bypass the initial fixes, highlighting the urgency of the new patch. The two vulnerabilities, registered under the CVE IDs CVE-2026-1234 and CVE-2026-5678, allow attackers to gain unauthorized access to print jobs and sensitive data.

These vulnerabilities have been actively exploited in the past, leading to an increased risk for businesses relying on this software. The first update, released in July 2026, did not fully resolve the issues. Following the release of the first patch, several companies reported further attacks that exploited the vulnerabilities again. PaperCut's security researchers recognized the need for a second update to ensure the integrity of the software. The new version of the software, delivered with the emergency patch, includes additional security measures to minimize attack surfaces.

These measures include improved authentication protocols and enhanced monitoring features designed to help administrators detect and respond to suspicious activities more easily. Companies using PaperCut NG or MF are strongly urged to install the update immediately. The vulnerabilities affect a wide range of organizations worldwide, particularly those operating in sensitive areas such as healthcare and education. Estimates suggest that up to 100,000 systems could be affected. PaperCut has also announced that it will provide further information on the vulnerabilities and corresponding protective measures in the coming weeks.

Security researchers are working closely with affected companies to ensure that all necessary steps are taken to secure the systems. The release of the second emergency patch occurs in a context where cyberattacks on businesses and institutions worldwide are increasing. According to the Cybersecurity Report 2026, the number of documented security incidents rose by 30% compared to the previous year. This trend underscores the necessity of implementing security updates promptly and regularly reviewing systems. The vulnerabilities in PaperCut NG and MF are not the first to be discovered in the software.

In the past, there have been several reports of similar issues, which were resolved through timely updates. However, the current situation shows that threats are becoming more complex, and companies must take proactive measures to protect their systems. PaperCut is committed to continuously improving the security of its products and plans to conduct regular security reviews in the future. The next scheduled review is set for the fourth quarter of 2026 to ensure that all security standards are met. According to PaperCut, the vulnerability CVE-2026-1234 affects a wide range of print servers deployed in businesses worldwide.