PaperCut reports active exploitation of a flaw affecting every PaperCut NG and MF version

Sources: primary
Summary: PaperCut published an advisory stating it has confirmed customer incidents and that all PaperCut NG and PaperCut MF versions are affected. The report names no CVE and states PaperCut has not shared details about the flaw or how it is being exploited. The stated actions are the emergency patch and restricting Application Server web interfaces to trusted IP addresses, alongside published indicators of compromise.
Why it matters: Print management servers sit inside the network with broad credential and file access, and an all-versions advisory with no published technical detail leaves patching and network restriction as the only available responses.
Follow-up: Track CVE assignment and PaperCut's own security bulletin, which did not resolve on this run.