CVE-2026-109169 | LogicalDOC Community Edition up to 9.3 TagsDataServlet firstLetter sql injection

October 12, 2026 Yanac

A vulnerability identified as critical has been detected in LogicalDOC Community Edition up to 9.3. The impacted element is the function TagsDataServlet. This manipulation of the argument firstLetter causes sql injection.

The identification of this vulnerability is CVE-2026-109169. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More