Filtered by vendor Logicaldoc Subscriptions
Filtered by product Logicaldoc Community Edition Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-109201 1 Logicaldoc 2 Logicaldoc, Logicaldoc Community Edition 2026-10-22 8.3 High
LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP or /services/rest/document with sequential document IDs to disclose, delete, or tamper with documents.