PaperCut ships maintenance release replacing emergency patches for two exploited flaws

PaperCut released a security maintenance release that replaces all previously published emergency patches addressing two flaws under active exploitation, the company said. The new builds supersede the emergency patch releases and their regressions, adding security hardening and completing standard QA testing, PaperCut said. The two vulnerabilities allow authentication bypass and arbitrary code execution on susceptible instances. GreyNoise and Blackpoint Cyber reported a suspected Russian-speaking actor weaponizing the flaws against at least 395 organizations in 48 countries, concentrated in the U.S. education sector, using hundreds of AI agents. Customers running emergency patch builds are advised to move to the maintenance release.