CVE-2025-55853 Server-side request forgery in n/a
An attacker can upload malicious files to trigger SSRF and LFI, enabling internal port scanning and local file access in webPDF.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-55853?
CVE-2025-55853 is a critical server-side request forgery vulnerability in n/a, published on 19 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF converter function does not check if internal or external resources are requested in the uploaded files and allows for protocols such as http:// and file:///. This allows an attacker to upload an XML or HTML file in the application, which when rendered to a PDF allows for internal port scanning and Local File Inclusion (LFI).
Weakness: CWE-918
Which versions are affected by CVE-2025-55853?
It affects 1 product.
Products include Softvision Webpdf.
How do I fix CVE-2025-55853?
No fix has been published for CVE-2025-55853 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2025-55853 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-55853 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-ww95-r66q-v2hh.