CVE-2026-116020 | BookStackApp BookStack up to 26.09.1 Attachment Controller AttachmentController improper authorization

October 24, 2026 Yanac

A vulnerability described as critical has been identified in BookStackApp BookStack up to 26.09.1. This impacts the function AttachmentController of the component Attachment Controller. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-116020. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More