{"uuid": "e9815729-8bdb-4c5b-9e26-7b10ecbac72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40281", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117379081123445713", "content": "\ud83d\udea8 Public exploit released for CVE-2026-40281 affecting Gotenberg\nhttps://github.com/MRdark-ops/CVE-2026-40281-exploit\nA proof-of-concept exploit has been published for CVE-2026-40281, a critical unauthenticated remote code execution vulnerability affecting Gotenberg versions prior to 8.31.0.\nThe flaw affects Gotenberg\u2019s PDF metadata handling and can allow a remote attacker to inject commands through crafted metadata values sent to the /forms/pdfengines/metadata/write endpoint. No authentication or user interaction is required.\nKey details:\u2800\u2022 CVE-2026-40281\u2022 CVSS: 9.1 Critical\u2022 Gotenberg < 8.31.0 affected\u2022 Unauthenticated remote code execution\u2022 Network exploitable\u2022 Low attack complexity\u2022 Public PoC now available\u2022 Fixed in Gotenberg 8.31.0\u2800The published exploit supports vulnerability detection, single-command execution and an interactive shell against vulnerable instances.\nOrganizations running affected Gotenberg deployments should upgrade to version 8.31.0 or later.\n\ud83d\udca5 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing", "creation_timestamp": "2026-10-03T21:24:00.413351Z"}