Logicaldoc Community Edition vulnerabilities

10 CVEs affecting Logicaldoc Community Edition, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-109206, published 2026-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-109205, published 2026-10-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a session. Attackers…
CVE-2026-109199, published 2026-10-12. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail…
CVE-2026-109170, published 2026-10-12. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate queries via the unvalidated indexed parameter.…
CVE-2026-109169, published 2026-10-12. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataServlet. Low-privileged…
CVE-2026-109202, published 2026-10-12. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId…
CVE-2026-109201, published 2026-10-12. High severity, CVSS 8.3. EPSS: 0.3% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents.…
CVE-2026-109206, published 2026-10-12. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts because the AvatarServlet (/avatar) performs no…
CVE-2026-109203, published 2026-10-12. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documents. Attackers can…
CVE-2026-109204, published 2026-10-12. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can…
CVE-2026-109200, published 2026-10-12. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host…