PaperCut NG/MF Vulnerability Actively Exploited in Attack – All Versions Impacted

PaperCut confirmed active exploitation of an unpatched vulnerability in PaperCut NG/MF affecting all currently supported versions; the vendor released emergency out-of-cycle builds for v25 and v26 (with v24 pending), warned customers with internet-reachable Application Servers to restrict access to trusted IP ranges immediately, and provided provisional IOCs and hunting tips while investigating confirmed customer incidents.