CVE-2026-33929

mediumPriorität · verfolgen · 0EPSS 0.007 · 53. PerzentilDEEUNLUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.71% (53rd) EPSS

CVSS 4.3 · medium

Is it mine?

14 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · cert_bund · ncsc_nl

EPSS · bewertet 2026-10-27

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7. Users are recommended to update to version 2.0.37 or 3.0.8 once available. Until then, they should apply the fix provided in GitHub PR 427. The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF". Users who have copied this example into their production code should apply the mentioned change. The example has been changed accordingly and is available in the project repository.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.6

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:Nsecondary · ENISA EU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NsecondaryAusnutzbarkeit 2.8 · Auswirkung 1.4

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:Nsecondary · OSV

v3.14mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.16.6mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:Hsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-22USCWE-22USCWE-22US

betroffene Produkte (14)

Betroffene Produkte und Versionsbereiche.

IBM License Metric Tool 9.2alle Versionencert_bundDEcpe:/a:ibm:license_metric_tool:9.2
IBM QRadar SIEM <7.5.0 UP16alle Versionencert_bundDE
IBM QRadar SIEM< 7.5.0 UP16cert_bundDE
Apache Software Foundation Apache PDFBox Examples≤ 3.0.0 ≤3.0.7enisa_euvdEU
Apache Software Foundation Apache PDFBox Examples≤ 2.0.24 ≤2.0.36enisa_euvdEU
Oracle Financial Services Applications≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Financial Services Analytical Applications Infrastructure≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Financial Services Compliance Studio≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Financial Services Model Management and Governance≤ vers:unknown/*ncsc_nlNL
Oracle Corporation Oracle Financial Services Enterprise Case Management≤ vers:unknown/*ncsc_nlNL
apache pdfbox2.0.24 → 2.0.37nvdUScpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*
apache pdfbox3.0.0 → 3.0.8nvdUScpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*
Maven org.apache.pdfbox:pdfbox-examples2.0.24 → 2.0.37osvUSpkg:maven/org.apache.pdfbox/pdfbox-examples
Maven org.apache.pdfbox:pdfbox-examples3.0.0 → 3.0.8osvUSpkg:maven/org.apache.pdfbox/pdfbox-examples

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2026-0312Kwetsbaarheden verholpen in Oracle Financial ServicesNL2026-08-19csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in diverse Financial Services Enterprise modules.
WID-SEC-W-2026-1687IBM License Metric Tool: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffDeutsch2026-05-26csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM License Metric Tool ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
WID-SEC-W-2026-2895Oracle Financial Services Applications: Mehrere SchwachstellenDeutsch2026-08-18csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
GHSA-gcj8-76p4-g2fqApache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code2026-04-14ghsa · osvUS
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7. Users are recommended to update to version 2.0.37 or 3.0.8 once available. Until then, they should apply the fix provided in GitHub PR 427. The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF". Users who have copied this example into their production code should apply the mentioned change. The example has been changed accordingly and is available in the project repository.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund ncsc_nl nvd osv NVD CVE.org MITRE

veröffentlicht 2026-04-14geändert 2026-10-26

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan