IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
PaperCut Zero-Day Actively Exploited Against NG and MF Servers
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
IT Procurement & Hardware Managed Service
IT Procurement & Hardware Managed Service Keep your technology running smoothly from the hardware you use every day to the systems that power your business. We provide end-to-end IT management so …
PaperCut has warned customers about active attacks targeting PaperCut NG and PaperCut MF.
The attack was first discovered as a zero-day. This means attackers were already abusing the issue before full technical details and fixes became available.
The issue affects the PaperCut Application Server. Therefore, systems exposed directly to the internet face the highest risk.
How Does the Attack Work?
The investigation found that attackers can bypass access controls in the web management interface.
After that, an attacker may change server settings without logging in. This flaw can then be chained with another issue to run code on the server.
One of the flaws is now tracked as CVE-2026-81578. Meanwhile, CVE-2026-82078 involves unsafe dynamic class loading.
When chained together, the issues can lead to remote code execution.
Signs of Possible Compromise
Administrators should watch for unusual activity involving the pc-app.exe process.
In addition, a missing, shortened, or deleted server.log file may indicate an attack.
Unusual database errors have also been seen on compromised systems.
For this reason, servers that were previously exposed to the internet should be reviewed even after patching.
Fixed Versions
PaperCut has released regular maintenance versions that include all fixes from the earlier emergency patches.
The fixed releases include PaperCut NG/MF 26.0.5, 25.0.13, and 24.1.10.
Therefore, customers should upgrade to the correct release for their current branch.
What Should Administrators Do?
First, update PaperCut NG or MF as soon as possible.
Also, do not expose the PaperCut web interface directly to the public internet. Restrict access with a firewall, VPN, or trusted IP addresses.
Next, review server logs and activity for signs of compromise. If anything suspicious appears, investigate the server before treating it as safe.
Key Takeaway
The PaperCut zero-day shows the risk of exposing management applications directly to the internet.
The flaws can allow attackers to bypass authentication and then run code on the server.
Since active exploitation has already been confirmed, organizations should patch quickly. They should also restrict web access and review affected servers for signs of compromise.
Source: https://thehackernews.com/2026/08/papercut-zero-day-exploited-in-attacks.html