RealObjects PDFreactor Multiple Vulnerabilities

CERT-Bund has published a security advisory (WID-SEC-2026-0862) detailing multiple critical vulnerabilities in RealObjects PDFreactor, affecting versions prior to 12.5. These vulnerabilities, with a CVSS base score of 8.8, enable remote attackers to execute arbitrary code, cause denial-of-service conditions, manipulate data, bypass security measures, or disclose confidential information. The advisory indicates that mitigation measures are available.

Organizations using RealObjects PDFreactor, particularly on Linux, UNIX, or Windows operating systems, should immediately assess their exposure to these vulnerabilities. It is recommended to apply available mitigation strategies and update to a patched version of PDFreactor as soon as possible to prevent potential security breaches. The advisory highlights the high risk associated with these flaws, emphasizing the need for prompt action to protect systems and data.