CVE-2026-75327

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:

Published 2026-08-26. Last modified 2026-09-01.