CVE-2026-109202 | LogicalDOC Community Edition up to 9.3 Servlet ZipExport.addFolderDocuments folderId improper authorization

October 12, 2026 Yanac

A vulnerability marked as problematic has been reported in LogicalDOC Community Edition up to 9.3. This impacts the function ZipExport.addFolderDocuments of the component Servlet. Performing a manipulation of the argument folderId results in improper authorization.

This vulnerability is identified as CVE-2026-109202. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More