CVE-2026-63630 | alam00000 BentoPDF up to 2.8.6 Workflow Deserialization deserializeWorkflow tsaUrl server-side request forgery

A vulnerability labeled as problematic has been found in alam00000 BentoPDF up to 2.8.6. Affected by this issue is the function deserializeWorkflow of the component Workflow Deserialization. Such manipulation of the argument tsaUrl leads to server-side request forgery.

This vulnerability is traded as CVE-2026-63630. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More