CVE-2026-40280 | gotenberg 8.1.0 webhook/downloadFrom server-side request forgery

April 30, 2026 Yanac

A vulnerability has been found in gotenberg 8.1.0 and classified as critical. This impacts an unknown function of the component webhook/downloadFrom. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-40280. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More