PaperCut Servers Targeted by Active Zero-Day Attack

Print management software provider PaperCut has confirmed a zero-day vulnerability in its PaperCut NG and PaperCut MF products following a security alert from a university.

The company issued an emergency patch on August 27, 2026, but advises customers that the most effective mitigation is to restrict server web interface access to trusted internal IP addresses only.

Indicators of compromise identified by the company include altered log files and alerts from intrusion detection and network monitoring tools, prompting an urgent advisory for all affected users.