PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of confirmed customer incidents and is treating this matter with the highest priority." An

The article reports that PaperCut has disclosed active zero-day exploitation of a vulnerability affecting all versions of its PaperCut NG and MF print management software, and has released emergency patches for versions 25 and 26 while confirming real customer incidents. These are factual indications of a critical third-party software compromise in a widely deployed component that can sit in environments alongside or upstream of AI systems and data flows. From a RealGround perspective, this underscores the need to treat print and document-management platforms as part of the AI and data supply chain, with SBOM-driven dependency tracking, prompt patching, and vendor risk monitoring. It also highlights the importance of continuous review of connected services that can expose sensitive training or inference data if compromised.