PaperCut MF and NG Flaws Enable Remote Code Execution and Active Exploitation
Active Exploitation · 2 sources · Updated 4mo ago · First seen Apr 21, 2026
Security agencies warned that multiple vulnerabilities in PaperCut MF and PaperCut NG can expose organizations to serious compromise, including the actively exploited flaw CVE-2023-27350. CISA previously reported that malicious actors were exploiting the vulnerability in the wild, allowing unauthenticated attackers to gain remote access to vulnerable PaperCut application servers and potentially execute code, making internet-exposed print management systems a high-risk target.
A later security bulletin from HKCERT highlighted additional PaperCut vulnerabilities, reinforcing ongoing risk around the platform and the need for prompt remediation. Together, the advisories indicate that unpatched PaperCut deployments remain attractive entry points for attackers, with affected organizations urged to review vendor guidance, apply available updates, and assess exposed servers for signs of compromise.
