CVE-2026-57916

Name of the Vulnerable Software and Affected Versions proCertum SmartSign versions prior to 9.4.3.90

Description The application opens the Certificate Practice Statement (CPS) URI without performing schema validation. This allows an attacker to create a certificate containing a CPS URI that points to a local executable file or an arbitrary URL. If a victim opens a document signed with this certificate, the application will execute the specified file or open the webpage.

Recommendations Update to version 9.4.3.90.