CVE-2025-63918: Cnblogs Pdfpatcher

Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days.

PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations.

Affected products

• Cnblogs Pdfpatcher: before 1.1.3.4663 (fixed in 1.1.3.4663)

Published 2025-11-17. Last modified 2026-06-17.