CVE-2026-39686

CVE-2026-39686 is an information disclosure vulnerability affecting bannersky BSK PDF Manager through version 3.7.2 that allows unauthorized actors to retrieve embedded sensitive data from the application. The flaw exposes system information to an unauthorized control sphere, potentially compromising confidential data stored within PDF management processes. The vulnerability carries a FAUCET Risk Score of 20.0/100 with an EPSS score of 0.00024, indicating low probability of exploitation in the wild. While specific CVSS metrics are unavailable, the nature of the vulnerability as an information exposure issue typically presents with relatively low attack complexity and requires some level of system access. There is currently no evidence of active exploitation in the wild. The CVE is not listed on the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on security hot lists, suggesting limited community attention and no publicly available exploit code. However, organizations running BSK PDF Manager version 3.7.2 or earlier should evaluate their exposure and consider upgrading to a patched version when available.