ZDI-CAN-29219 HIGH 7.8 Upcoming Feb 19, 2026

pdfforge

pdfforge is a software company known for PDF creation and manipulation tools. This high-severity vulnerability (CVSS 7.8) requires local access and user interaction to exploit, but once triggered grants an attacker high-level compromises to confidentiality, integrity, and availability with no authentication required. Security teams should monitor for exploitation attempts targeting pdfforge users and prepare patching procedures ahead of the June 2026 vendor deadline.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported February 19, 2026
Deadline June 19, 2026 64d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy