CyberSecBulletin

Apryse vulnerabilities

We track 2 vulnerabilities in Apryse products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Apryse vulnerabilities

  • 9.8 Critical severity

    Html2pdf: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-56590Apryse

    An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server.

  • 7.5 High severity

    Html2pdf: Server-Side Request Forgery

    CVE-2025-56589Apryse

    A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker to read local files on the server or make