[ Vendor · 3 CVEs ]
Stirling-Tools
CVEs affecting Stirling-Tools published in the last 30 days, plus any Stirling-Tools CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113605 | 20 Oct 2026 | CVSS 7.2 | Stirling-Tools Stirling-PDFStirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass… | |
| CVE-2026-113606 | 20 Oct 2026 | CVSS 7.1 | Stirling-Tools Stirling-PDFStirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files… | |
| CVE-2026-85714 | 14 Oct 2026 | CVSS 9.1 | Stirling-Tools Stirling-PDFStirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator… |