ZDI-CAN-29219
HIGH 7.8
Upcoming
Feb 19, 2026
pdfforge
pdfforge is a software company known for PDF creation and manipulation tools. This high-severity vulnerability (CVSS 7.8) requires local access and user interaction to exploit, but once triggered grants an attacker high-level compromises to confidentiality, integrity, and availability with no authentication required. Security teams should monitor for exploitation attempts targeting pdfforge users and prepare patching procedures ahead of the June 2026 vendor deadline.
Advisory Details
Researcher
Mat Powell of TrendAI Zero Day Initiative
Reported
February 19, 2026
Deadline
June 19, 2026
64d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H