CVE-2026-30291 - Vulnerability Analysis

Overview

Ora Tools PDF Reader Reader & Editor APPv4.3.5 contains an arbitrary file overwrite vulnerability caused by the file import process, letting attackers overwrite critical internal files leading to code execution or information exposure, exploit requires no special privileges.

Severity & Score

Impact

Attackers can overwrite critical files, leading to arbitrary code execution or exposure of sensitive information.

Mitigation

Update to the latest version.

References

• https://github.com/Secsys-FDU/AF_CVEs/issues/18
• https://oratools.github.io/
• https://play.google.com/store/apps/details?id=pdf.reader.editor.office.ora
• https://secsys.fudan.edu.cn/

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 2, 2026

🟠 CVE-2026-30291 - High (8.4) An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30291/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner