PaperCut NG/MF Vulnerability Actively Exploited in Attack – All Versions Impacted
Brief
PaperCut has confirmed that hackers are actively exploiting an unpatched vulnerability in its widely used PaperCut NG and PaperCut MF print management software, prompting the company to rush out an emergency patch just hours after issuing its first warning.
The Australian vendor said its security response team is investigating “confirmed customer incidents” and is treating the matter with the highest priority, though a formal CVE identifier has not yet been assigned.
According to PaperCut’s security bulletin, the flaw affects every currently supported version of PaperCut NG and PaperCut MF, making version number irrelevant to exposure.
The company was alerted to the issue by a university customer’s internal security and digital forensics teams, whose findings allowed PaperCut engineers to reproduce the bug and confirm it was being actively abused in the wild.