HOMEVULNERABILITIESCVE-2026-39686
NONE

CVE-2026-39686

CWE-497Published: April 8, 2026· Updated: Apr 8, 2026

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.9th

Official Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through <= 3.7.2.

NVD Source

Technical Analysis

CVE-2026-39686 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

All References (1)

→
https://patchstack.com/database/Wordpress/Plugin/bsk-pdf-manager/vulnerability/wordpress-bsk-pdf-manager-plugin-3-7-2-sensitive-data-exposure-vulnerability?_s_id=cve

Quick Facts

CVE IDCVE-2026-39686
SeverityNONE
WeaknessCWE-497
CISA KEVNo
EPSS (30d)0.02%
PublishedApr 8, 2026

Related CVEs (CWE-497)

CVE-2026-34413
8.6
CVE-2026-24222
8.6
CVE-2025-9986
8.2
CVE-2025-13691
8.1
CVE-2026-52694
7.5
CVE-2026-34891
7.5

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-39686 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-39686·NVD