Vulnerability Database

322,573

Total vulnerabilities in the database

CVE-2025-56590

An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server.

  • Published: Jan 22, 2026
  • Updated: Feb 13, 2026
  • CVE: CVE-2025-56590
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
apryse / html2pdf 11.5.0 11.5.0.x
apryse / html2pdf 11.7.0 11.7.0.x
apryse / html2pdf 11.10.0 11.10.0.x