CVE-2026-72691 | OpenSignLabs OpenSignServer up to 2.37.0 getsignedurl docId improper authentication

August 10, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in OpenSignLabs OpenSignServer up to 2.37.0. Affected is the function getsignedurl. The manipulation of the argument docId leads to improper authentication.

This vulnerability is referenced as CVE-2026-72691. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More