PT-2026-4512 · Unknown · Pdfcomplete Corporate Edition

Ismael Nava · CVE-2021-47896 · Published 2026-01-23 · Updated 2026-01-24

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PDF Complete Corporate Edition version 4.1.45

Description The software contains an unquoted service path issue in the pdfcDispatcher service. This allows local attackers to potentially execute arbitrary code. Exploitation involves leveraging the unquoted path in the service binary location to inject malicious executables, which will then run with elevated LocalSystem privileges.

Recommendations Apply appropriate quoting to the service path to prevent the execution of unauthorized code.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2021-47896

Affected Products

Pdfcomplete Corporate Edition

References · 7

• 🔥 https://exploit-db.com/exploits/49558 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47896 · Security Note
• https://pdf-complete.informer.com/download · Note
• https://t.me/CVEtracker/42860 · Telegram Post
• https://twitter.com/CVEnew/status/2014995835034173623 · Twitter Post
• https://pdfcomplete.com/cms/dpl/tabid/111/Default.aspx?r=du2vH8r · Note
• https://vulncheck.com/advisories/pdfcomplete-corporate-edition-pdfcdispatcher-unquoted-service-path · Note