> TritonInfoSec News
Home / Aug 30, 2026 / Story
0
#2 The Hacker News general August 28, 2026 at 17:12 UTC

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

By [email protected] (The Hacker News)

AI Summary

Attackers are chaining two vulnerabilities in PaperCut NG and MF to achieve unauthenticated remote code execution, prompting PaperCut to issue an emergency patch with additional hardening measures. The exploit gives unauthenticated attackers remote control over PaperCut's trusted configuration layer, enabling arbitrary Java code execution inside the application server. Security practitioners running PaperCut in enterprise print environments should apply the emergency patch immediately.

Read full article → https://thehackernews.com/2026/08/attackers-chain-…

Relevance score: 80.0/100

# More from August 30

  1. 1
    PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions The Hacker News
  2. 3
    OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems SecurityWeek
  3. 4
    Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more Graham Cluley
  4. 5
    ATF Confirms Cyber Incident After Ransomware Group Claims Attack SecurityWeek
  5. 6
    Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server The Hacker News
  6. 7
    ServiceNow warns of three max severity security vulnerabilities BleepingComputer
  7. 8
    Over 8,300 Gitea servers vulnerable to code execution attacks BleepingComputer
  8. 9
    Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable The Hacker News
  9. 10
    Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth The Hacker News