Critical severityNVD Advisory· Published May 15, 2026· Updated May 15, 2026
CVE-2026-41552
CVE-2026-41552
Description
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated PDF.
This issue was fixed in PDF Export Module version 0.7.6.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.