PaperCut, print management software used widely in offices, schools and healthcare, is under active attack from a zero-day flaw that lets attackers take full control of the server without logging in.

• What it is: Two vulnerabilities (CVE-2026-81578 and CVE-2026-82078) in PaperCut NG and PaperCut MF, which when chained together allow an unauthenticated attacker to run malicious code on the server.
• Who is affected: Any business, school or health provider running PaperCut NG or MF for print management. PaperCut currently considers all versions potentially impacted.
• What the risk is: Confirmed real-world attacks are already occurring, and a successful attack hands the intruder full control of the print server, a common stepping stone into the wider network.
• What to do: Apply the emergency patches PaperCut released on 28 August 2026 for versions 24, 25 and 26 immediately.

If your business runs PaperCut for print management, we recommend checking your version and applying the patch today rather than waiting for a routine maintenance window. Source: BleepingComputer.