CVE-2026-108554Published
PDFMathTranslate through 1.9.11 SSRF via Gradio Web GUI Link Input
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108554 · Microsoft / collected KEV context
cve-program · CVE-2026-108554
- https://github.com/PDFMathTranslate/PDFMathTranslate/issues/1188
- https://github.com/PDFMathTranslate/PDFMathTranslate
- https://github.com/PDFMathTranslate/PDFMathTranslate/blob/0f0618d3303d064d97e7adb77557b21236c6cee0/pdf2zh/gui.py#L149-L179
- https://github.com/PDFMathTranslate/PDFMathTranslate/blob/0f0618d3303d064d97e7adb77557b21236c6cee0/pdf2zh/gui.py#L257-L269
- https://www.vulncheck.com/advisories/pdfmathtranslate-through-1.9.11-ssrf-via-gradio-web-gui-link-input
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.