GHSA-9j8v-79v3-wcmp
Record from GitHub Advisory Database · Published February 21, 2026
PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of PDF-XChange Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TrackerUpdate process. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of a target user. Was ZDI-CAN-27788.
Risk scores
Timeline
- Feb 21, 2026 CVE Published
- Mar 10, 2026 Security Advisory (9 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-9j8v-79v3-wcmp
vulnetix vdb fixes GHSA-9j8v-79v3-wcmpOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-9j8v-79v3-wcmp/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-2040 advisory
- https://www.zerodayinitiative.com/advisories/ZDI-26-122 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-20404 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20402 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20403 advisory
- https://corp.mediatek.com/product-security-bulletin/February-2026 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-20405 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20406 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20407 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20408 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-20409 advisory