PaperCut Print Management Software Exploited In The Wild

This report details critical PaperCut vulnerabilities (CVE-2023-27350 and CVE-2023-27351) that enable authentication bypass and remote code execution, notes public proof-of-concept code and observed exploitation in the wild, highlights approximately 1,800 internet-exposed PaperCut instances (concentrated in the education sector), links observed infrastructure to TrueBot and Clop-associated activity, and recommends urgent patching, network segmentation, and firewall restrictions.