CVE-2026-54082 | veraPDF veraPDF-validation up to 1.30.1/1.31.70 DocumentBuilderFactory xml external entity reference

July 29, 2026 Yanac

A vulnerability was found in veraPDF veraPDF-validation up to 1.30.1/1.31.70. It has been declared as critical. This affects the function PDFAValidator.validate/GFPDAcroForm.getdynamicRender of the component DocumentBuilderFactory. Such manipulation leads to xml external entity reference.

This vulnerability is traded as CVE-2026-54082. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More