Vulnerability in Deepthought.industries Ace Scanner
CVE-2026-30287
An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (10.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 11th percentile — 10.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Deepthought.industries Ace Scanner — versions 1.4.5
Weakness classification (CWE)
References
- secsys.fudan.edu.cn/ (Not Applicable)
- deepthought.industries/ (Product)
- play.google.com/store/apps/details (Product)
- github.com/Secsys-FDU/AF_CVEs/issues/16 (Exploit, Third Party Advisory, Issue Tracking)
Frequently asked questions
- What is CVE-2026-30287?
- CVE-2026-30287 is a high-severity vulnerability in Deepthought.industries Ace Scanner, classified under External Control of File Name or Path. CVSS score: 8.4/10. Published 2026-04-01.
- How severe is CVE-2026-30287?
- High severity. CVSS v3 base score is 8.4 out of 10.