PaperCut Software vulnerability and exploit: #
PaperCut Software published a security bulletin on August 27, 2026, revealing that certain versions of PaperCut NG and PaperCut MF are affected by undisclosed vulnerabilities. The vendor indicated that its investigation is ongoing; while technical details remain non-public, initial findings suggest the flaw is remotely exploitable.
PaperCut Software has confirmed that the vulnerability is being actively exploited in the wild.
The following versions are affected
- PaperCut NG & MF: All versions prior to the Emergency Patch Release
What are PaperCut NG and PaperCut MF? #
PaperCut Software PaperCut NG and PaperCut MF are server-based software applications that track, manage, and secure network printing, with PaperCut MF additionally integrating directly into multifunction printer hardware to control copying, scanning, and faxing.
What is the impact? #
Successful exploitation of this vulnerability would allow a remote attacker to potentially compromise the PaperCut application server, which may result in unauthorized system access or arbitrary code execution depending on the underlying flaw.
Are any updates or workarounds available? #
Users are encouraged to update to the latest version as quickly as possible:
- PaperCut NG & MF 26.x: Upgrade to version 26.x Emergency Patch Release or later.
- PaperCut NG & MF 25.x: Upgrade to version 25.x Emergency Patch Release or later.
- PaperCut NG & MF 24.x: Upgrade to version 24.x Emergency Patch Release or later once available (currently unreleased).
- Older / Unsupported Versions: Upgrade to a supported major version (26.x or 25.x) and apply the corresponding Emergency Patch Release.
If the PaperCut application server is exposed to the public Internet, immediately restrict access to trusted IP addresses using firewalls or network access controls.
How to find potentially vulnerable systems with runZero #
From the Software Inventory, use the following query to locate potentially impacted assets:
vendor:="PaperCut Software" AND (product:="PaperCut MF" OR product:="PaperCut NG") AND source:runzero
