CVE-2026-40281

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 3, 2026

Last Seen

October 5, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerabilities in Gotenberg Exposed70.5

Recent reports reveal critical unauthenticated remote code execution (RCE) vulnerabilities in Gotenberg versions 8.30.1 and earlier, specifically CVE-2026-40281 and CVE-2026-42589. These vulnerabilities allow attackers to inject commands via crafted metadata values sent to the /forms/pdfengines/meta...