Vulnerability · Published Jul 27, 2026 · Assigned by CERT-PL

CVE-2026-57916Arbitrary Path Execution via CPS URI in proCertum SmartSign

Medium 4.6

In plain English

A medium-severity security flaw in proCertum SmartSign from Asseco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 4.0)4.6Medium

Exploit odds (30 days)0.1%top 98.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the application, the specified file will be executed (or webpage will be opened). This issue was fixed in version 9.4.3.90.

Affected products (as reported)

Vendor	Product	Versions
Asseco	proCertum SmartSign	0 – before 9.4.3.90

Weakness: CWE-73 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

References

https://cert.pl/posts/2026/07/CVE-2026-57916 third-party-advisory
https://pomoc.certum.pl/pl/oprogramowanie/procertum-smartsign/ product