PaperCut emergency patches for public-facing NG/MF servers
Security Patch Release
Summary
Hide ▲
Show ▼
PaperCut released emergency patches for public-facing PaperCut NG/MF servers after warning that the software is under active zero-day exploitation. The patch release gives exposed customers an urgent remediation path while the company continues to recommend access restriction and other mitigation for systems that cannot be patched immediately.
Related Happenings
PaperCut customer confirmed compromise incidents
Incident
H score36
First: 27.08.2026 19:31
Last: 27.08.2026 19:31
Sources 1
How related:
We are aware of confirmed customer incidents and are treating this matter with the highest priority.
About this happening:
PaperCut customers are facing confirmed compromise incidents tied to actively exploited PaperCut NG and PaperCut MF servers, putting exposed deployments at immedia...
PaperCut customer confirmed compromise incidents
IncidentHow related: We are aware of confirmed customer incidents and are treating this matter with the highest priority.
About this happening: PaperCut customers are facing confirmed compromise incidents tied to actively exploited PaperCut NG and PaperCut MF servers, putting exposed deployments at immedia...
Microsoft SharePoint Server actively exploited multi-CVE wave
Exploitation Wave
H score79
First: 15.07.2026 12:44
Last: 15.07.2026 12:44
Sources 1
About this happening:
SharePoint Server exploitation wave remains active across internet-exposed on-premises instances, with CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164 used...
Microsoft SharePoint Server actively exploited multi-CVE wave
Exploitation WaveAbout this happening: SharePoint Server exploitation wave remains active across internet-exposed on-premises instances, with CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164 used...
Microsoft March 2026 Patch Tuesday (83 CVEs)
Security Patch Release
H score40
First: 11.03.2026 03:08
Last: 11.03.2026 03:08
Sources 1
About this happening:
Microsoft released its March 2026 Patch Tuesday update with 83 CVEs across its product range, reducing exposure to a broad set of flaws that includes issues Microsoft...
Microsoft March 2026 Patch Tuesday (83 CVEs)
Security Patch ReleaseAbout this happening: Microsoft released its March 2026 Patch Tuesday update with 83 CVEs across its product range, reducing exposure to a broad set of flaws that includes issues Microsoft...
Timeline
-
27.08.2026 19:31 1 articles · 3h ago
PaperCut warns of active zero-day exploitation in PaperCut NG and PaperCut MF
Initial DisclosurePaperCut says it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF, warns that hackers are using zero-day attacks against all versions, and says it is aware of confirmed customer incidents involving Internet-exposed PaperCut Application Servers.
Show sources
- PaperCut warns of NG, MF flaw exploited in zero-day attacks — www.bleepingcomputer.com — 27.08.2026 19:31
-
27.08.2026 19:31 2 articles · 3h ago
PaperCut releases emergency patches for public-facing PaperCut NG/MF servers
Mitigation Patch UpdatePaperCut releases emergency patches for customers with public-facing PaperCut NG/MF servers and tells administrators who cannot patch immediately to use firewall rules or network access controls to restrict web interfaces to trusted IP addresses.
Show sources
- PaperCut warns of NG, MF flaw exploited in zero-day attacks — www.bleepingcomputer.com — 27.08.2026 19:31
- PaperCut warns of NG, MF flaw exploited in zero-day attacks — www.bleepingcomputer.com — 27.08.2026 19:31
-
27.08.2026 19:31 1 articles · 3h ago
PaperCut shares indicators of compromise for suspected server compromise
Detection Ioc UpdatePaperCut shares indicators of compromise for potentially compromised servers, including suspicious activity from the legitimate PaperCut pc-app.exe process, server.log files that have been modified, deleted, or are missing, and server.log errors such as 'ERROR No suitable driver found for jdbc:no:x' and 'ERROR DatabaseUtils - Database error looking up cardID: VALUES CAST', while warning that a lack of indicators does not prove a server is clean.
Show sources
- PaperCut warns of NG, MF flaw exploited in zero-day attacks — www.bleepingcomputer.com — 27.08.2026 19:31