PaperCut's Zero-Day Is Being Exploited Right Now: Every Version Is Exposed, and the Patch Race Is the Real Story
An actively-exploited zero-day in PaperCut NG/MF affects every supported version. The alert came from a university's forensics team, an emergency patch for v25/v26 shipped the next morning, hardened Release 2 for every branch followed by 10:08pm AEST on Aug 28, and it published two new CVEs plus concrete IOCs to hunt.
Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.Exploited in the wildCVE-2026-82078 +3
papercutzero-dayprint-server