PaperCut Zero-Days, JFrog Artifactory & SonicWall CVSS 10.0

On August 27, PaperCut Software disclosed two zero-days in its PaperCut NG and MF print management platform — products used by thousands of universities, hospitals, and enterprises — and confirmed active exploitation was already underway. Researchers chained the two flaws into a pre-authentication remote code execution path. The first emergency patch was bypassed within 48 hours, requiring a second.