CVE-2026-34376

CVE-2026-34376 is an access-control vulnerability affecting PdfDing versions prior to 1.7.0, which allows unauthenticated users to bypass password protection and retrieve shared PDF documents. Rated 7.5 High severity, this flaw has a network attack vector and low attack complexity, enabling unauthorized access to potentially confidential information without requiring privileges or user interaction. The vulnerability's impact is primarily on confidentiality, as it grants access to documents users expected to be protected. There is currently no evidence of active exploitation, nor is public exploit code available in common repositories. Community discussion is minimal, and its low EPSS score suggests a very low probability of exploitation.