PaperCut is releasing PaperCut security maintenance updates for PaperCut MF and PaperCut NG on September 10, 2026. If your business uses PaperCut for print management, you need to upgrade — especially if your print server is accessible from the internet or you have untrusted devices on your network.
What Is the PaperCut Security Maintenance Release?
The PaperCut security maintenance release covers versions 24, 25, and 26 of both PaperCut MF (Managed Facilities) and PaperCut NG. This is a full maintenance release — not a quick patch — which means it has gone through PaperCut’s complete testing and validation process before shipping.
The release consolidates everything from Emergency Patch Releases 1, 2, and 3, plus additional security hardening not included in those earlier emergency fixes. Because it carries a new version number, it will appear through the standard PaperCut Portal and download pages, with published release notes you can review before deploying.
Who Needs This PaperCut Security Update Most Urgently?
PaperCut recommends the upgrade for all customers, but this PaperCut security update is highest priority if:
- Your PaperCut Application Server is reachable from the internet (even through a VPN or remote-access tool)
- You have untrusted devices — personal laptops, guest machines, contractor systems — connecting to your network
- You’re still running Emergency Patch Release 1 or 2 (EPR 3 customers are less exposed but should still upgrade)
If none of those apply — fully internal network, trusted endpoints only, EPR 3 already installed — you still need to upgrade, just with slightly less urgency. The PaperCut security hardening in this release goes beyond what the emergency patches addressed.
What Problems Can Unpatched PaperCut Create?
PaperCut sits at the center of your print environment, handling user authentication, tracking every print job, and often connecting to your Active Directory or LDAP. Known vulnerabilities in unpatched PaperCut have been exploited in the wild — attackers used them to gain unauthorized access to application servers and move laterally into broader networks.
The Emergency Patch Releases 1, 2, and 3 that preceded this PaperCut security maintenance release were issued because the underlying issues were serious enough to push out-of-band fixes before a full release was ready. If you skipped any of those, this update is not optional.
How to Apply the PaperCut Security Update
The process is straightforward if you’ve done a PaperCut upgrade before:
- Log in to the PaperCut Portal or your standard download page
- Download the maintenance release for your version (24, 25, or 26) and your product (MF or NG)
- Review the published release notes — they will list the exact CVEs addressed
- Follow PaperCut’s upgrade guide; the installer preserves your existing configuration and database
- Test print queues and user authentication after the upgrade
If your PaperCut instance is managed by ABS or another managed print provider, confirm with them that the PaperCut security upgrade is scheduled. Don’t assume it happens automatically.
PaperCut MF vs. PaperCut NG — Does the Security Release Differ?
Both products are affected and both are getting PaperCut security maintenance releases on the same date. PaperCut MF is typically deployed in larger environments with multiple sites or complex workflows; PaperCut NG is more common in smaller offices. The underlying security issues span both platforms — neither one is exempt.
Should You Be on PaperCut Version 24, 25, or 26?
If you’re running a version older than 24, you’re outside the scope of this PaperCut security release — which means you’re not getting these fixes at all. Running anything older than what’s covered here is a signal it’s time to evaluate a full upgrade. If you’re unsure what version you’re on, log in to your PaperCut admin console and check the version number under About.
What This Means for Tallahassee and North Florida Businesses
ABS manages print environments for offices across Tallahassee, Thomasville, and North Florida and South Georgia — including law firms, medical offices, and state agencies where print security ties directly to compliance requirements. If PaperCut is part of your managed print setup through ABS, reach out to confirm your upgrade timeline. If you manage PaperCut in-house, September 10 is your target date for this PaperCut security maintenance release. Don’t wait on this one.
Frequently Asked Questions
Does this PaperCut security release affect PaperCut Pocket or Hive?
This maintenance release covers PaperCut MF and PaperCut NG versions 24, 25, and 26. PaperCut Pocket and Hive are cloud-native products updated by PaperCut directly — you don’t manage upgrades for those yourself. Check PaperCut’s release notes on September 10 for any Pocket/Hive-specific announcements.
If I already installed Emergency Patch Release 3, do I still need this upgrade?
Yes. The maintenance release includes additional PaperCut security hardening not covered by EPR 3, and it replaces the emergency patch with a fully tested release. EPR 3 was a stopgap — this is the complete fix.
Will the upgrade break my existing print queues or settings?
PaperCut’s in-place upgrade process is designed to preserve your existing configuration. Test after upgrading — confirm queues are active, users can authenticate, and reports are running. If you have a staging instance, test there first.