CVE-2026-54079 | veraPDF validation up to 1.30.1/1.31.70 AcroForm GFPDAcroForm.java getdynamicRender xml external entity reference

July 29, 2026 Yanac

A vulnerability was found in veraPDF validation up to 1.30.1/1.31.70. It has been rated as critical. This impacts the function getdynamicRender of the file validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java of the component AcroForm Handler. Performing a manipulation results in xml external entity reference.

This vulnerability is known as CVE-2026-54079. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More