CVE-2026-30276

critical · 9.8

An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

9.8

CVSS

0.7%

EPSS (exploit prob.)

50th

EPSS percentile

2026-03-31

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-73

Affected products

Vendor	Product	Affected versions
deftpdf	document_translator	54.0

Check a specific version with /api/v1/cve/match.

References

https://deftpdf.com/
https://github.com/Secsys-FDU/AF_CVEs/issues/22
https://secsys.fudan.edu.cn/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-30276