# CVE-2026-92176: pdfforge PDF Architect App object out-of-bounds read remote code execution

Source: https://junglewise.ai/threats/cve-2026-92176-pdfforge-pdf-architect-app-object-out-of-bounds-read-remote-code  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-15. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-92176 · Severity: high · CVSS 7.8 · Published 2026-09-15

pdfforge PDF Architect is a PDF editing and conversion tool used by professionals. This vulnerability allows attackers to execute arbitrary code on a user's computer by tricking them into opening a malicious PDF file or visiting a malicious webpage. An attacker could gain full control of the affected system to steal sensitive data, install malware, or compromise business operations.

Technologies: [Pdfforge PDF Architect](https://junglewise.ai/threats/technologies/pdf-architect). Vendors: [Pdfforge](https://junglewise.ai/threats/vendors/pdfforge).

## Quick answers

**Is CVE-2026-92176 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92176 being exploited in the wild.

**How severe is CVE-2026-92176?** High severity, with a CVSS score of 7.8, published 15 September 2026.

**Which products and versions are affected?** pdfforge PDF Architect.

**Is there a fix for CVE-2026-92176?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-92176 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-92176?** Check whether you run Pdfforge PDF Architect. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an out-of-bounds buffer read in the handling of App objects within pdfforge PDF Architect. The flaw arises from insufficient validation of user-supplied data when processing App objects, allowing an attacker to read past the end of an allocated buffer. The attack requires user interaction—the target must open a malicious file or visit a malicious page. Successfully exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the PDF Architect process. No patch status is currently documented in the advisory; mitigation is currently limited to restricting use of the product.

## Affected products

- pdfforge PDF Architect

## Timeline

- 2025-11-27: disclosed: Vulnerability reported to vendor
- 2026-08-31: advisory: Coordinated public release of advisory
- 2026-09-15: other: Published to NVD

## References

- [https://www.zerodayinitiative.com/advisories/ZDI-26-611/](https://www.zerodayinitiative.com/advisories/ZDI-26-611/)

## Related threats

- [pdfforge PDF Architect privilege escalation in activation-service](https://junglewise.ai/threats/cve-2026-92180-pdfforge-pdf-architect-privilege-escalation-in-activation-service)
- [pdfforge PDF Architect out-of-bounds write in PDF parsing](https://junglewise.ai/threats/cve-2026-92179-pdfforge-pdf-architect-out-of-bounds-write-in-pdf-parsing)
- [pdfforge PDF Architect memory corruption in PDF parsing](https://junglewise.ai/threats/cve-2026-92178-pdfforge-pdf-architect-memory-corruption-in-pdf-parsing)
- [pdfforge PDF Architect out-of-bounds write in PDF parsing](https://junglewise.ai/threats/cve-2026-92177-pdfforge-pdf-architect-out-of-bounds-write-in-pdf-parsing)
- [pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability…](https://junglewise.ai/threats/cve-2025-14421-pdfforge-pdf-architect-pdf-file-parsing-out-of-bounds-read)