CVE-2026-42589
OS command injection in Thecodingmachine Gotenberg
CVSS score
9.8
EPSS probability
%3.0
Risk score
0.3
Published
5 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using AI to speed things up. Others are leaving their
Similar Vulnerabilities
7.5
CVE-2026-40280Server-side request forgery in Thecodingmachine Gotenberg
Patch verified Public Exploits:2EPSS %2
7.2
CVE-2026-39383Server-side request forgery in Thecodingmachine Gotenberg
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-42589"