{"id":51631,"date":"2023-04-26T00:00:00","date_gmt":"2023-04-26T00:00:00","guid":{"rendered":"urn:uuid:59b52251-84f5-9c5b-c5a1-10565db79223"},"modified":"2023-04-26T00:00:00","modified_gmt":"2023-04-26T00:00:00","slug":"update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/","title":{"rendered":"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/23\/d\/update-now-papercut-vulnerabilities-cve-2023-27350-under-active-exploitation-\/Update-Now-PaperCut-vulnerabilities-CVE-2023-27350-Under-Active-Exploitation-resized-641.jpg\"><!-- OneTrust Cookies Consent Notice start for trendmicro.com --><!-- OneTrust Cookies Consent Notice end for trendmicro.com --> <head> <meta charset=\"UTF-8\"> <meta name=\"viewport\" content=\"width=device-width\"> <meta name=\"description\"> <meta name=\"robots\" content=\"index,follow\"> <meta name=\"keywords\" content=\"articles, news, reports,exploits &amp; vulnerabilities,research\"> <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\"> <meta name=\"template\" content=\"article1withouthero\"> <meta property=\"article:published_time\" content=\"2023-04-26\"> <meta property=\"article:tag\"> <meta property=\"article:section\" content=\"research\"> <link rel=\"icon\" type=\"image\/ico\" href=\"\/content\/dam\/trendmicro\/favicon.ico\"> <link rel=\"canonical\" href=\"https:\/\/www.trendmicro.com\/en_us\/research\/23\/d\/update-now-papercut-vulnerability-cve-2023-27350-under-active-ex.html\"> <title>Update Now PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation <\/title> <link href=\"https:\/\/fonts.googleapis.com\/css?family=Open+Sans:300,300i,400,400i,600\" rel=\"stylesheet\">\n<link href=\"\/\/customer.cludo.com\/css\/296\/1798\/cludo-search.min.css\" type=\"text\/css\" rel=\"stylesheet\"> <link rel=\"stylesheet\" href=\"\/etc.clientlibs\/trendresearch\/clientlibs\/clientlib-trendresearch.min.css\" type=\"text\/css\"> <meta property=\"og:url\" content=\"https:\/\/www.trendmicro.com\/en_us\/research\/23\/d\/update-now-papercut-vulnerability-cve-2023-27350-under-active-ex.html\"><br \/>\n<meta property=\"og:title\" content=\"Update Now PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation \"><br \/>\n<meta property=\"og:site_name\" content=\"Trend Micro\"><br \/>\n<meta property=\"og:image\" content=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/23\/d\/update-now-papercut-vulnerabilities-cve-2023-27350-under-active-exploitation-\/Update-Now-PaperCut-vulnerabilities-CVE-2023-27350-Under-Active-Exploitation-resized-641.jpg\"><br \/>\n<meta property=\"og:locale\" content=\"en_US\"> <meta name=\"twitter:card\" content=\"summary_large_image\"><br \/>\n<meta name=\"twitter:site\" content=\"@TrendMicro\"><br \/>\n<meta name=\"twitter:title\" content=\"Update Now PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation \"><br \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/23\/d\/update-now-papercut-vulnerabilities-cve-2023-27350-under-active-exploitation-\/Update-Now-PaperCut-vulnerabilities-CVE-2023-27350-Under-Active-Exploitation-resized-641.jpg\"> <\/head> <body class=\"articlepage page basicpage context-business\" id=\"readabilityBody\" readability=\"49.896650035638\"> <!-- Page Scroll: Back to Top --> <a id=\"page-scroll\" title=\"VerticalPageScroll\" href=\"javascript:jumpScroll($(this).scrollTop());\"> <span class=\"icon-chevron-up\"><\/span> <\/a> <!-- \/* Data Layer *\/ --> <\/p>\n<div class=\"root responsivegrid\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"articleBodyNoHero aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"research-layout article container\" role=\"contentinfo\">\n<article class=\"research-layout--wrapper row\" data-article-pageid=\"162150468\">\n<div class=\"col-xs-12 col-md-12 one-column\">\n<div class=\"col-xs-12 col-md-12\" readability=\"9.2738095238095\">\n<div class=\"article-details\" role=\"heading\" readability=\"38.071428571429\"> <span class=\"article-details__bar\" role=\"img\"><\/span> <\/p>\n<p class=\"article-details__description\">Two vulnerabilities in PaperCut have been found, and one of them is being actively exploited in the wild. This blog entry provides a summary of the vulnerabilities, and includes security guidance for IT and SOC professionals. <\/p>\n<p class=\"article-details__author-by\">By: Trend Micro <time class=\"article-details__date\">April 26, 2023<\/time> <span>Read time:&nbsp;<\/span><span class=\"eta\"><\/span> (<span class=\"words\"><\/span> words) <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<hr class=\"research-layout-divider\"> <main class=\"main--content col-xs-12 col-md-8 col-md-push-2\"> <\/p>\n<div class=\"richText\" readability=\"49.695773339526\">\n<div readability=\"47.329307942406\">\n<p><i><sup><b>Updated on April 26, 2023, 4:12 a.m. EDT where we added details on an observed instance through Trend Micro Managed XDR where we believe the vulnerabilities detailed in this blog were abused by threat actors. We also added Trend Micro Deep Discovery Inspector rules which can help protect against potential exploitation of the vulnerabilities discussed.<\/b><\/sup><\/i><\/p>\n<p><a href=\"https:\/\/www.zerodayinitiative.com\/\">Trend Micro\u2019s Zero Day Initiative (ZDI)<\/a> discovered two vulnerabilities, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-27350\">CVE-2023-27350<\/a> and <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-27351\">CVE-2023-27351<\/a>, in Papercut, a print management software solution that is used by <a href=\"https:\/\/www.papercut.com\/\">over 100 million users<\/a> globally. Evidence was found that one of these two vulnerabilities, CVE-2023-27350, is being actively exploited by malicious actors for remote code execution (RCE). This blog entry provides an overview of the vulnerabilities and includes information that IT and SOC professionals need to know.<\/p>\n<p><span class=\"body-subhead-title\">How can CVE-2023-27350 be exploited?<\/span><\/p>\n<p><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-27350\">CVE-2023-27350<\/a>, which affects PaperCut MF and NG products, was found to have been exploited in the wild (ITW) in the middle of April. This vulnerability is also identified as <a href=\"https:\/\/www.zerodayinitiative.com\/advisories\/ZDI-23-233\/\">ZDI-23-233<\/a>. &nbsp;<\/p>\n<p>The critical-rated CVE-2023-27350 has a vulnerability severity score of 9.8. It can be abused by an unauthenticated attacker to perform RCE on an unpatched PaperCut Application Server.<\/p>\n<p>On April 18, 2023, a PaperCut customer reported suspicious activity, which suggested that unpatched servers are being exploited through CVE-2023-27350. Based on PaperCut&#8217;s investigation, the earliest suspicious activity that&#8217;s possibly related to CVE-2023-27350 dates back to April 14, 2023.<\/p>\n<p>Trend Micro Managed XDR observed an instance where we believe this vulnerability was abused by threat actors. Upon successful exploitation of the vulnerability, pc-app.exe (PaperCut NG\/MF) can be used for RCE. In this case, threat actors chose to run a PowerShell script via the exploited app. This PowerShell script was used to download and run a malicious payload, with netsh used to circumvent the firewall. The downloaded payload came from a temporary hosting site utilized by threat actors; all uploaded files in this site are deleted after 60 minutes, a convenient feature beneficial to attackers.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"image\">\n<figure class=\"image-figure\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/23\/d\/update-now-papercut-vulnerabilities-cve-2023-27350-under-active-exploitation-\/Fig%201%20The%20observed%20behavior%20of%20threat%20actors%20exploiting%20PaperCut%20vulnerability%20detected%20by%20Trend%20Micro%20XDR.jpg\" alt=\"Figure 1. The observed behavior of threat actors exploiting the PaperCut vulnerability detected by Trend Micro XDR\"><figcaption>Figure 1. The observed behavior of threat actors exploiting the PaperCut vulnerability detected by Trend Micro XDR.<\/figcaption><\/figure>\n<\/p><\/div>\n<div>\n<div class=\"richText\" readability=\"41.33295194508\">\n<div readability=\"29.176201372998\">\n<p><span class=\"body-subhead-title\">What can threat actors steal when exploiting CVE-2023-27351?<\/span><\/p>\n<p>The other PaperCut vulnerability,&nbsp;<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-27351\">CVE-2023-27351<\/a>, can allow unauthorized attackers to potentially extract user account information, such as usernames, full names, email addresses, office and department information, and payment card numbers, that is stored within a customer\u2019s PaperCut MF and NG servers. This vulnerability is also identified as&nbsp;<a href=\"https:\/\/www.zerodayinitiative.com\/advisories\/ZDI-CAN-19226\/\">ZDI-23-232<\/a>.<\/p>\n<p>Malicious actors exploiting this vulnerability can also retrieve hashed passwords from internal PaperCut-created user accounts. It is important to note that cybercriminals won\u2019t have access to any password hashes for users synchronized from external directory sources, such as Microsoft 365 and Google Workspace.&nbsp;<\/p>\n<p>According to PaperCut, there is no evidence that CVE-2023-27351 is being used in the wild. CVE-2023-27351 has a severity rating of 8.2.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"richText\" readability=\"35\">\n<div readability=\"15\">\n<p><span class=\"body-subhead-title\">Which PaperCut products are affected?<\/span><\/p>\n<p>The following PaperCut versions and components are affected by CVE-2023-27350:<\/p>\n<ul>\n<li><span class=\"rte-red-bullet\">PaperCut MF or PaperCut NG version 8.0 or later, on all OS platforms<\/span><\/li>\n<li><span class=\"rte-red-bullet\">PaperCut MF or PaperCut NG Application Servers<\/span><\/li>\n<li><span class=\"rte-red-bullet\">PaperCut MF or PaperCut NG Site Servers<\/span><\/li>\n<\/ul>\n<p>Meanwhile, the following PaperCut versions and components are affected by CVE-2023-27351:<\/p>\n<ul>\n<li><span class=\"rte-red-bullet\">PaperCut MF or PaperCut NG version 15.0 or later, on all OS platforms<\/span><\/li>\n<li><span class=\"rte-red-bullet\">PaperCut MF or PaperCut NG ApplicationServer<\/span><\/li>\n<\/ul>\n<p>PaperCut components or products that are not included in the aforementioned lists are not affected by the two vulnerabilities discussed in this blog entry.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"richText\" readability=\"40.816616766467\">\n<div readability=\"27.538922155689\">\n<p><span class=\"body-subhead-title\">What can organizations do to prevent and mitigate the risks associated with CVE-2023-27350 and CVE-2023-27351?<\/span><\/p>\n<p>Both these vulnerabilities have been fixed in PaperCut MF and NG versions 20.1.7, 21.2.11, and 22.0.9. Organizations can find instructions on how to update their PaperCut versions via PaperCut\u2019s&nbsp;<a href=\"https:\/\/www.papercut.com\/kb\/Main\/PO-1216-and-PO-1219\">vulnerability bulletin<\/a>.&nbsp;<\/p>\n<p>Because the original submission of these vulnerabilities was done through Trend Micro\u2019s Zero Day Initiative, Trend Micro has also released rules and filters that can help provide protection against the potential exploitation of these vulnerabilities.&nbsp;<\/p>\n<p><b>Trend Micro Cloud One &#8211; Network Security &amp; TippingPoint Protection Filters<\/b><\/p>\n<ul>\n<li><span class=\"rte-red-bullet\">42626: HTTP: PaperCut NG SetupCompleted Authentication Bypass Vulnerability (ZDI-23-233)\u202f<\/span><\/li>\n<li><span class=\"rte-red-bullet\">42258: HTTP: PaperCut NG SecurityRequestFilter Authentication Bypass Vulnerability (ZD-23-232)<\/span><\/li>\n<\/ul>\n<p><b>Trend Micro Cloud One &#8211; Workload Security &amp; Deep Security IPS Rules<\/b><\/p>\n<ul>\n<li><span class=\"rte-red-bullet\">1011731\u202f- PaperCut NG Authentication Bypass Vulnerability (CVE-203-27350)<\/span><\/li>\n<\/ul>\n<p><b>Trend Micro Deep Discovery Inspector<\/b><\/p>\n<ul>\n<li><span class=\"rte-red-bullet\">Rule 4835: CVE-2023-27350 &#8211; PaperCut MF\/NG Authentication Bypass Exploit &#8211; HTTP (REQUEST)<br \/><\/span><\/li>\n<li><span class=\"rte-red-bullet\">Rule 4836: CVE-2023-27351 &#8211; PaperCut MF\/NG Authentication Bypass Exploit &#8211; HTTP (REQUEST)<\/span><\/li>\n<\/ul>\n<p>Trend Micro is monitoring this ongoing campaign and will be updating this blog entry as more information becomes available.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<section class=\"tag--list\">\n<p>Tags<\/p>\n<\/section>\n<p> <\/main> <\/article>\n<\/div>\n<\/div><\/div>\n<\/div>\n<p> <!-- \/* Core functionality javascripts, absolute URL to leverage Akamai CDN *\/ --> <!--For Modal-start--> <\/p>\n<p> <span>sXpIBdPeKzI9PC2p0SWMpUSM2NSxWzPyXTMLlbXmYa0R20xk<\/span> <\/p>\n<p> <!--For Modal-end--> <!-- Go to www.addthis.com\/dashboard to customize your tools --> <\/body> Read More <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/23\/d\/update-now-papercut-vulnerability-cve-2023-27350-under-active-ex.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two vulnerabilities in PaperCut have been found, and one of them is being actively exploited in the wild. This blog entry provides a summary of the vulnerabilities, and includes security guidance for IT and SOC professionals. Read More HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":51632,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[61],"tags":[9510,9555,9509],"class_list":["post-51631","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trendmicro","tag-trend-micro-research-articles-news-reports","tag-trend-micro-research-exploitsvulnerabilities","tag-trend-micro-research-research"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-26T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/23\/d\/update-now-papercut-vulnerabilities-cve-2023-27350-under-active-exploitation-\/Update-Now-PaperCut-vulnerabilities-CVE-2023-27350-Under-Active-Exploitation-resized-641.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation\",\"datePublished\":\"2023-04-26T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/\"},\"wordCount\":825,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg\",\"keywords\":[\"Trend Micro Research : Articles, News, Reports\",\"Trend Micro Research : Exploits&amp;Vulnerabilities\",\"Trend Micro Research : Research\"],\"articleSection\":[\"TrendMicro\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/\",\"name\":\"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg\",\"datePublished\":\"2023-04-26T00:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg\",\"width\":764,\"height\":692},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Trend Micro Research : Articles, News, Reports\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/trend-micro-research-articles-news-reports\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/","og_locale":"en_US","og_type":"article","og_title":"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-04-26T00:00:00+00:00","og_image":[{"url":"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/23\/d\/update-now-papercut-vulnerabilities-cve-2023-27350-under-active-exploitation-\/Update-Now-PaperCut-vulnerabilities-CVE-2023-27350-Under-Active-Exploitation-resized-641.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation","datePublished":"2023-04-26T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/"},"wordCount":825,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2023\/04\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg","keywords":["Trend Micro Research : Articles, News, Reports","Trend Micro Research : Exploits&amp;Vulnerabilities","Trend Micro Research : Research"],"articleSection":["TrendMicro"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/","url":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/","name":"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2023\/04\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg","datePublished":"2023-04-26T00:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2023\/04\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2023\/04\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation.jpg","width":764,"height":692},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/update-now-papercut-vulnerability-cve-2023-27350-under-active-exploitation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Trend Micro Research : Articles, News, Reports","item":"https:\/\/www.threatshub.org\/blog\/tag\/trend-micro-research-articles-news-reports\/"},{"@type":"ListItem","position":3,"name":"Update Now: PaperCut Vulnerability CVE-2023-27350 Under Active Exploitation"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/51631","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=51631"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/51631\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/51632"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=51631"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=51631"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=51631"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}