CVE-2026-75413

Published: Aug 26, 2026Modified: Sep 1, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

https://github.com/RainyGao-GitHub/DocSys/issues/48

Source: cve@mitre.org

https://github.com/RainyGao-GitHub/DocSys/issues/48

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.