CVE-2026-39686 describes an information exposure vulnerability in bannersky BSK PDF Manager versions up to 3.7.2. The flaw allows unauthorized parties to retrieve embedded sensitive system information from the application. The vulnerability has been publicly disclosed but lacks a CVSS score and official remediation details. No known active exploitation has been reported. The product is a locally installed application rather than a cloud service, so users must monitor vendor advisories for patches.

The vulnerability enables unauthorized access to sensitive system information embedded within the BSK PDF Manager application. Exposure of such data could lead to further security risks depending on the nature of the information disclosed. However, no active exploitation or additional impact details are currently documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, users should monitor bannersky's communications for updates. Until a patch is available, limit exposure by restricting access to the affected application and sensitive files where feasible.