https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T21:46:32.952033+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109201 fkie_cve-2026-109201 2026-10-16T21:46:32.978370+00:00

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP or /services/rest/document with sequential document IDs to disclose, delete, or tamper with documents.

 https://db.gcve.eu/vuln/ghsa-g833-jpqm-6g28 GHSA-g833-jpqm-6g28 2026-10-16T21:46:32.978496+00:00

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP or /services/rest/document with sequential document IDs to disclose, delete, or tamper with documents.