CVE-2026-85714

{
  "etk_id": "ETK-2026-1599",
  "cve_id": "CVE-2026-85714",
  "display_id": "CVE-2026-85714",
  "ghsa_id": "GHSA-mrr8-934j-4g8m",
  "euvd_id": "EUVD-2026-101594",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL import validation bypass in Stirling-PDF",
  "summary": "Stirling-PDF versions before 2.13.2 can mishandle SQL submitted through the database import feature when deployed with the default H2 database and security settings. An authenticated administrator could use this flaw to access files and potentially execute code as the account running the service.",
  "mitigation": "Upgrade Stirling-PDF to version 2.13.2 or later. Until upgrading, restrict administrator access and disable or tightly limit use of the database import feature.",
  "vendor": "Stirling-Tools",
  "product": "Stirling-PDF",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 2.11.0"
      ],
      "ecosystem": "maven",
      "fixed_versions": [
        "v2.13.2"
      ],
      "package_name": "stirling-software/stirling-pdf",
      "purl": "pkg:maven/stirling-software/stirling-pdf"
    }
  ],
  "cwes": [
    94
  ],
  "cvss_score": 9.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": 0.0063,
  "epss_percentile": 0.4923,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 27.572921366666666,
  "t0_at": "2026-10-14T18:22:21.191000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-14T19:34:08.742666+00:00",
      "days": 0.04985592206018519,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T18:22:21.191000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-14T18:22:21.191000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T18:22:21.191000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85714"
    }
  }
}