PaperCut Zero-Day Emergency Patch: Hardening Exposed Print Servers and Hosting Infrastructure
On Friday, 27 August 2026, PaperCut Software issued an urgent security advisory for its NG and MF print management solutions after confirming active exploitation of an unpatched zero-day vulnerability. The flaw has no CVE identifier yet, and the vendor has shared no technical details about the attack vector. However, PaperCut reports confirmed customer incidents and recommends immediate patching plus network isolation of application servers. For hosting providers, enterprises running managed print services, and sysadmins with internet-facing PaperCut instances, this is a high-priority operational risk. ShadowServer data indicates roughly 1,000 PaperCut servers remain exposed online, mostly in North America and Europe. This article breaks down who is affected, what changed, and the practical mitigation steps every server operator should take this week. Related ServerSpan guide: A Practical Guide to VPS Hardening: 15 Essential Security Steps for Linux Servers . What Happened: PaperCu...