PaperCut Remote Code Execution Vulnerability Exploited in the Wild

**FortiGuard Labs Alert:** CVE-2023-27350 is a critical (CVSS 9.8) authentication-bypass RCE in PaperCut MF/NG (versions 8.0+), actively exploited in the wild to deploy remote management/maintenance tools and Truebot malware (linked to Clop); vendor patches are available and FortiGuard has released AV signatures, an IPS signature, and webfiltering to block reported post-exploitation IOCs—apply vendor patches and mitigations immediately.