CVE-2025-56218: Ascertia Signinghub

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

Affected products

• Ascertia Signinghub: up to and including 8.6.8

Published 2025-10-17. Last modified 2026-07-05.