Server-Side Request Forgery in PDFMathTranslate Affects User Security
CVE-2026-108554

6.9MEDIUM

Key Information:

Vendor: PDFmathtranslate
Status: PDFmathtranslate
Vendor: CVE Published:; 10 October 2026

🔔 Create PDFmathtranslate Vulnerability Alert

What is CVE-2026-108554?

A vulnerability in PDFMathTranslate version 1.9.11 allows unauthenticated attackers to exploit a server-side request forgery (SSRF). This flaw arises when user-input URLs are processed without proper validation. As a result, attackers can induce the server to fetch arbitrary URLs. This could potentially expose sensitive internal services and cloud metadata endpoints, leading to unauthorized data access within affected systems.