PaperCut Software published an urgent security bulletin on 27 August 2026, Australian Eastern Standard Time. The objects are PaperCut NG and PaperCut MF. The company said its security response team is investigating active exploitation, that it is aware of confirmed customer incidents, and that the investigation is ongoing. The news is the vendor page, not a break-in.