« Back to list

Apryse

Apryse Html2pdf: vulnerabilities and CVEs

Apryse Html2pdf has 2 published vulnerabilities, 2 of them in the last 12 months. 1 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical1
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2025-56590Critical (9.8)0.54%—Jan 22, 2026
An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10. This vulnerability could allow an attacker to execute arbitrary operating system commands on the local server.
CVE-2025-56589High (7.5)0.47%—Jan 22, 2026
A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0. These vulnerabilities could allow an attacker…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1190 Exploit Public-Facing Application2
  2. T1005 Data from Local System1
  3. T1059 Command and Scripting Interpreter1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Apryse