Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Actively exploited PaperCut NG/MF vulnerability allows unauthenticated attackers to execute arbitrary Java code. Researchers found multiple bypass methods; vendor issued second emergency patch.