Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 26, 2026 · NIST NVD

   Detected

   Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Versions starting in 2.1.5 and prior to 2.5.2 have Denial of Service (DoS) vulnerability in the Stirling-PDF watermark functionality ( endpoint). The vulnerability allows authenticated users to cause resource exhaustion and server crashes by providing extreme values for the and parameters.

2. Jun 17, 2026 · NIST NVD

   Updated

   Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Versions starting in 2.1.5 and prior to 2.5.2 have Denial of Service (DoS) vulnerability in the Stirling-PDF watermark functionality ( endpoint). The vulnerability allows authenticated users to cause resource exhaustion and server crashes by providing extreme values for the and parameters.

Affected

• cpe stirling/stirling pdfversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33438

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33438

  Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Versions starting in 2.1.5 and prior to 2.5.2 have Denial of Service (DoS) vulnerability in the Stirling-PDF watermark functionality ( endp

  nvd.nist.gov

References

• Exploit · github.com