CVE-2026-30291

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Published 2026-04-01. Last modified 2026-06-17.