revolunet CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL revolunet CVE published 2026-10-14

CVE-2026-110636

The CVE-2026-110636 vulnerability in pypdftk through 0.5 allows attackers to inject OS commands via specially crafted PDF or output paths. This vulnerability exists in the fill_form(), dump_data_fields(), and pdftk_cmd_util() functions, which construct shell commands using caller-supplied paths without proper sanitization. The impact could include system compromise, data breaches, or lateral movement with [truncated]