CVE-2026-57916

MediumCVSS 4.6

Published: 27/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

A vulnerability in proCertum SmartSign before version 9.4.3.90 opens CPS URI without schema validation. An attacker can craft a certificate with a URI pointing to a local executable or URL, and when the victim opens the document, the file is executed.

Risk Assessment

An attacker can remotely execute arbitrary programs on the victim's machine, leading to full system compromise.

Recommendation

Update proCertum SmartSign to version 9.4.3.90 or later, which fixes this vulnerability.

Other vulnerabilities in proCertum SmartSign

CVE-2026-57917Medium
An XXE vulnerability in proCertum SmartSign before version 9.4.3.90 allows parsing of external XML entities from crafted signature files, enabling SSRF and potentially local file reading. The vulnerability triggers simply by previewing a file in the selection window.

Original NVD description (English source)

proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the application, the specified file will be executed (or webpage will be opened). This issue was fixed in version 9.4.3.90.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS