Critical Zero-Day Exploitation of PaperCut NG/MF Vulnerability

PaperCut has issued an urgent advisory for an active zero-day vulnerability in PaperCut NG/MF that allows unauthenticated exploitation and has been confirmed in attacks against customers; an emergency patch for versions 25 and 26 is available, and organizations with publicly accessible servers are advised to restrict access, apply the patch, and monitor server logs and the pc-app.exe process for Indicators of Compromise.