https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T19:05:44.470726+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109202 CVE-2026-109202 — LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet 2026-10-16T19:05:44.471815+00:00

Affected: LogicalDOC Community Edition

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter. Attackers can request /zip-export with a restricted folder ID, since ZipExport.addFolderDocuments() skips READ and DOWNLOAD permission checks, to download all of its documents in a ZIP archive.