CVE-2026-67678
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code.
Risk Assessment
An attacker can upload a malicious file that gets executed on the server, potentially leading to system takeover or data theft.
Recommendation
Update DocSys to the latest version and implement file type validation and restrictions on executing uploaded files.
Other vulnerabilities in DocSys
See all- CVE-2026-75328High
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability.
- CVE-2026-75413High
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.
- CVE-2025-11629Medium
A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Original NVD description (English source)
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code
Vulnerability data from NVD (NIST) · CISA KEV · EPSS