CVE-2026-30276

CRITICAL

DeftPDF Document Translator 54.0 - File Overwrite

Title source: llm
STIX 2.1

Description

An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

References (3)

Scores

CVSS v3 9.8
EPSS 0.0007
EPSS Percentile 22.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-73
Status published
Products (1)
deftpdf/document_translator 54.0
Published Mar 31, 2026
Tracked Since Mar 31, 2026