Vulnerability

CVE-2026-39919

1 story · 1 outlet

Impacted if

Not known yet — the vendor's record and the NVD are being read.

First seen by AX-NEWS 13 Oct 2026, 21:33 UTC · latest story 13 Oct 2026, 21:33 UTC. Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

Ghostscript flaw lets hackers hijack servers via PDF uploads
BleepingComputer 13 Oct 2026, 21:33 UTC Cybersecurity

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]