CVE-2026-5414
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A vulnerability was found in Newgen OmniDocs up to version 12.0.00 in the file /omnidocs/WebApiRequestRedirection. Manipulation of the DocumentId argument leads to improper control of resource identifiers, enabling remote attack. The exploit is publicly available.
Risk Assessment
The vulnerability may allow an attacker to access or manipulate unauthorized resources, threatening data confidentiality and integrity.
Recommendation
Contact the vendor for a patch or apply temporary mitigations such as validating the DocumentId parameter.
Original NVD description (English source)
A security flaw has been discovered in Newgen OmniDocs up to 12.0.00. Affected by this issue is some unknown functionality of the file /omnidocs/WebApiRequestRedirection. The manipulation of the argument DocumentId results in improper control of resource identifiers. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.