DHTMLX

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

DHTMLX records in CISA KEV

No DHTMLX vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Pdf Export Module · all components

TI-2026-30115 CVE-2026-41553 · GHSA-qc73-55rc-fgph

MEDIUM 50

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00648 Published 2026-05-15 Fixed in 0.7.6 CWE-78

TI-2026-30114 CVE-2026-41552 · GHSA-cj88-m5vv-89m3

MEDIUM 46

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00497 Published 2026-05-15 Fixed in 0.7.6 CWE-22