Vulnerability Database

319,478

Total vulnerabilities in the database

CVE-2025-56590

An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server.

  • Published: Jan 22, 2026
  • Updated: Jan 24, 2026
  • CVE: CVE-2025-56590
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

No affected software listed.