Huntress has observed an active zero-day vulnerability being exploited in PaperCut NG / MF.
@PaperCutDev has confirmed this gives an unauthenticated attacker remote control over PaperCut’s trusted configuration, which can be used to execute arbitrary Java code inside the app.
