convertx vulnerabilities and fixes

Recent CVEs affecting convertx, with upgrade or downgrade steps. 2 tracked.

convertx has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-27. Highest priority: CVE-2025-66449 (score 50/100).

• CVE-2025-66449 HIGH 8.8 UPGRADE ConvertXis a self-hosted online file converter
• CVE-2026-24741 HIGH 8.1 UPGRADE ConvertXis a self-hosted online file converter

FAQ

How do I fix convertx vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is convertx being exploited right now?

None of the tracked convertx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which convertx CVE should I patch first?

CVE-2025-66449 currently ranks highest (50/100): ConvertXis a self-hosted online file converter.

← Back to latest CVEs