CVE-2026-48072 | Docmost up to 0.80.0 Public Avatar And Logo Image Endpoint path traversal

September 24, 2026 Yanac

A vulnerability classified as problematic has been found in Docmost up to 0.80.0. This issue affects some unknown processing of the component Public Avatar And Logo Image Endpoint. This manipulation causes path traversal.

This vulnerability is registered as CVE-2026-48072. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More