CVE-2026-30276

Published: Mar 31, 2026Modified: Jul 24, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Affected (1)

Products: Deftpdf: Document Translator

Deftpdf

1 product

Document Translator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Deftpdf Document Translator	Version 54.0

Related CWEs

CWE-73

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (3)

https://deftpdf.com/

Source: cve@mitre.org

Product

https://github.com/Secsys-FDU/AF_CVEs/issues/22

Source: cve@mitre.org

ExploitThird Party Advisory

https://secsys.fudan.edu.cn/

Source: cve@mitre.org

Not Applicable

Timeline

No history available yet.