{"id":"CVE-2026-75413","aliases":["EUVD-2026-66749","GHSA-qw69-3gp9-jmmq"],"status":"published","title":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through...","description":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0048,"percentile":0.41761,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-552"],"published":"2026-08-26T00:00:00Z","modified":"2026-09-09T16:04:24Z","references":[{"url":"https://github.com/RainyGao-GitHub/DocSys/issues/48","tags":["exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75413"},{"url":"https://github.com/advisories/GHSA-qw69-3gp9-jmmq"}],"sources":{"cve":[{"id":"CVE-2026-75413","description":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.","status":"published","published":"2026-08-26T00:00:00Z","modified":"2026-09-01T18:53:04.137Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:20:07.260654Z"}],"euvd":[{"id":"EUVD-2026-66749","description":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.","status":"published","published":"2026-08-26T00:00:00Z","modified":"2026-09-01T18:53:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:01:16.851436Z"}],"ghsa":[{"id":"GHSA-qw69-3gp9-jmmq","title":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through...","description":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.","status":"published","published":"2026-08-26T21:31:46Z","modified":"2026-09-01T21:32:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T15:11:15.292173Z"}],"nvd":[{"id":"CVE-2026-75413","description":"DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.","status":"published","published":"2026-08-26T21:16:41.217Z","modified":"2026-09-09T16:04:24.933Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:12:41.66469Z"}]}}