What is the CVSS score of CVE-2026-30277?

CVE-2026-30277 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

N A CVE-2026-30277

EUVD-2026-17536 HIGH

Path Traversal (CWE-22)

2026-03-31 mitre

Path Traversal RCE Information Disclosure N A

8.4

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 31, 2026 - 17:45 euvd

EUVD-2026-17536

Analysis Generated

Mar 31, 2026 - 17:45 vuln.today

CVE Published

Mar 31, 2026 - 00:00 nvd

HIGH 8.4

DescriptionCVE.org

An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

AnalysisAI

Arbitrary file overwrite in PDF Reader App TA/UTAX Mobile Print v3.7.2.251001 allows remote attackers to overwrite critical internal files during the file import process, potentially leading to remote code execution or unauthorized information exposure. The vulnerability affects a mobile print utility with demonstrated proof-of-concept documentation available on GitHub, though CVSS scoring and formal vendor patch status remain unavailable at time of analysis.

Technical ContextAI

The vulnerability resides in the file import mechanism of TA/UTAX Mobile Print, a PDF reader and mobile printing application. The underlying flaw involves insufficient validation of file paths during import operations, permitting attackers to specify arbitrary destination paths when importing files. This path traversal or insecure file operation weakness enables overwriting of files the application relies upon for security enforcement or privileged operations. The affected product is identified as PDF Reader App TA/UTAX Mobile Print version 3.7.2.251001, marketed by Triumph-Adler as part of their mobile and cloud printing solutions. The root cause appears to involve inadequate input sanitization on file import parameters, allowing an attacker to manipulate file paths without proper canonicalization or boundary checking.

RemediationAI

Immediate remediation requires upgrading TA/UTAX Mobile Print to a version after 3.7.2.251001; however, no specific patched version has been independently confirmed in available advisory data. Organizations should contact Triumph-Adler support directly (via https://www.triumph-adler.com) to obtain the latest patched release and confirm compatibility with existing infrastructure. As an interim mitigation, restrict file import functionality to trusted sources and implement file system access controls to prevent the application from writing to sensitive system directories or configuration paths. Network-level controls can also limit the delivery of malicious PDF or import files to endpoints running the vulnerable version. The Secsys-FDU research group (https://github.com/Secsys-FDU/AF_CVEs/issues/24) has published technical details; consulting their advisory may yield additional context for defensive measures.