Read the docs

veraPDF

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

veraPDF records in CISA KEV

No veraPDF vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-39009 CVE-2026-54079 · GHSA-36mm-w85j-3q2j

veraPDF Validation XXE via XFA

Priority MEDIUM 44

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00555 Published 2026-07-29 Fixed in 1.30.2, 1.31.71 CWE-611
TI-2026-39008 CVE-2026-54078 · GHSA-3jh7-wm29-q568

veraPDF Validation XXE via Rich Text

Priority MEDIUM 44

veraPDF validation model is an implementation of the veraPDF validation model.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00555 Published 2026-07-29 Fixed in 1.30.2, 1.31.71 CWE-611
Open these records in search →