CVE-2026-85714 | Stirling-Tools Stirling-PDF up to 2.13.1 Database Import import-database DatabaseService.validateSqlContent unrestricted upload

October 14, 2026 Yanac

A vulnerability was found in Stirling-Tools Stirling-PDF up to 2.13.1 and classified as problematic. Affected is the function DatabaseService.validateSqlContent of the file /api/v1/database/import-database of the component Database Import. Executing a manipulation can lead to unrestricted upload.

This vulnerability appears as CVE-2026-85714. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More