High severity8.4NVD Advisory· Published Apr 1, 2026· Updated Apr 27, 2026

CVE-2026-30291

Description

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/Secsys-FDU/AF_CVEs/issues/18nvd
oratools.github.ionvd
play.google.com/store/apps/detailsnvd
secsys.fudan.edu.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000