CVE-2026-109206 | LogicalDOC Community Edition up to 9.3 Session Validation AvatarServlet userId information disclosure

October 12, 2026 Yanac

A vulnerability classified as problematic was found in LogicalDOC Community Edition up to 9.3. Affected by this issue is the function AvatarServlet of the component Session Validation. The manipulation of the argument userId results in information disclosure.

This vulnerability is cataloged as CVE-2026-109206. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More