All packages
DocSys vulnerabilities
3 known CVE vulnerabilities in DocSys, translated and rated.
- CVE-2026-67678Critical
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code.
- CVE-2026-75328High
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability.
- CVE-2026-75413Low risk· EPSS 6%
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.