CISA Adds PaperCut NG/MF Flaws to Its Actively Exploited Vulnerabilities List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially listed several security weaknesses in PaperCut NG and PaperCut MF as part of its Known Exploited Vulnerabilities (KEV) catalog, signaling that threat actors are actively targeting these flaws.

CISA maintains the KEV catalog to help federal and private organizations prioritize remediation of vulnerabilities that have been observed in the wild. Inclusion in the list typically prompts accelerated patching and heightened monitoring because the agency has credible evidence that the issues are being weaponized.

PaperCut NG and PaperCut MF are widely deployed print‑management solutions used by schools, businesses, and government agencies to control and audit printing activity. Their broad adoption makes any security shortfall a potential vector for compromise across diverse networks.

The agency’s notice does not disclose technical details, but it confirms that multiple weaknesses have been identified and are being exploited. Such vulnerabilities can allow attackers to bypass authentication, execute arbitrary code, or gain elevated privileges on affected systems, depending on the specific flaw.

Organizations that run PaperCut are now urged to review the vendor’s security advisories, apply any available patches, and consider interim mitigations such as network segmentation or access‑control hardening. CISA’s guidance also recommends that federal entities treat these flaws as high‑risk and allocate resources to remediate them promptly.

Experts view the addition as part of a broader trend in which attackers focus on management and infrastructure software that often enjoys a lower security profile than end‑user applications. By flagging PaperCut’s vulnerabilities, CISA aims to raise awareness and reduce the attack surface before larger-scale incidents emerge.