CVE-2026-109199 | LogicalDOC Community Edition up to 9.3 Velocity Templates subject/message code injection

October 12, 2026 Yanac

A vulnerability categorized as critical has been discovered in LogicalDOC Community Edition up to 9.3. The affected element is an unknown function of the component Velocity Templates. The manipulation of the argument subject/message results in code injection.

This vulnerability was named CVE-2026-109199. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More