Skip to content
Vulnerability intelligence

CVE-2026-39919: Ghostscript critical heap buffer overflow

In WordPress, exploitation needs four conditions. Wordfence reports no exploitation in the wild yet.

2026
What WebPulse reported · 1 analysis
A crafted PDF can run code on unpatched Ghostscript, but only in tuned conditions

In WordPress, exploitation needs four conditions. Wordfence reports no exploitation in the wild yet.

October 14, 2026
View CVE-2026-39919 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795