CyberSecBulletin

Cnblogs vulnerabilities

We track 1 vulnerability in Cnblogs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 17, 2025.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Cnblogs vulnerabilities

  • 7.1 High severity

    Pdfpatcher: Improper Restriction of XML External Entity Reference

    CVE-2025-63917Cnblogs

    PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary