CVE-2026-91941 and CVE-2026-92177: Critical Vulnerabilities in PDF Processing Tools

Redpacketsecurity

CVE-2026-91941 and CVE-2026-92177: Critical Vulnerabilities in PDF Processing Tools

First seen 16 Sep 2026, 16:30 UTC • •57.1

Article Content

1 / 3

Browse articles

ThreatCluster •September 16, 2026 at 16:33 UTC

•CVE-2026-91941 allows denial of service via large PDF downloads in Crawl4AI.
•CVE-2026-92177 enables remote code execution in pdfforge PDF Architect with user interaction.
•Both vulnerabilities were published on September 15, 2026, and require immediate attention.

Two critical vulnerabilities were disclosed on September 15, 2026, affecting PDF processing tools. CVE-2026-91941 in Crawl4AI allows attackers to exploit uncontrolled resource consumption, leading to denial of service through large PDF downloads. This affects internet-facing APIs and multi-tenant platforms, posing a high operational risk. CVE-2026-92177 in pdfforge PDF Architect enables remote code execution via out-of-bounds write vulnerabilities, requiring user interaction to exploit. Both vulnerabilities lack active exploitation evidence but should be addressed promptly. The potential impact includes service disruption and unauthorized code execution on affected systems.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-09-15

CVE-2026-91941 published

Crawl4AI vulnerability disclosed, allowing denial of service via uncontrolled resource consumption.

Redpacketsecurity

2026-09-15

CVE-2026-92177 published

pdfforge PDF Architect vulnerability disclosed, enabling remote code execution with user interaction.

2026-09-16

Current status assessment

Both vulnerabilities are acknowledged but lack evidence of active exploitation as of today.

Redpacketsecurity

More articles in this cluster (2)

Threat Graph

9 entities, 8 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

DDoS
Zero-day Exploit
T1203 - Exploitation for Client Execution

Organization (1)

Crawl4AI

Vulnerability (2)

CVE-2026-91941
CVE-2026-92177

Weakness (2)

Cwe-400 - Uncontrolled Resource Consumption
Cwe-787 - Out-of-bounds Write

Affected Platform (1)

PDF Architect

Relationships

CVE-2026-91941 targets PDF Architect
CVE-2026-92177 targets PDF Architect
DDoS targets PDF Architect
Zero-day Exploit targets PDF Architect
T1203 - Exploitation for Client Execution targets PDF Architect
CVE-2026-91941 related to Crawl4AI
CVE-2026-91941 related to Cwe-400 - Uncontrolled Resource Consumption
CVE-2026-91941 related to Cwe-787 - Out-of-bounds Write

Following this threat?

Track Crawl4AI and CVE-2026-91941 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…