Recently Patched PaperCut Zero-Days Used in Data Theft Attacks

2026-09-02

PaperCut Software has patched two new zero-day vulnerabilities in its PaperCut NG and MF print management software. One critical vulnerability, an authentication bypass, can be chained with another to achieve Remote Code Execution (RCE). Threat intelligence firm Defused confirms that attackers are actively exploiting the authentication bypass vulnerability for data theft.