Papermerge vulnerabilities

Products

• Dms 6
• Papermerge-core 3
• Papermerge 2

Newest

• papermerge papermerge-core Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all CVE-2026-110624 2.3 LowOctober 14, 2026
• papermerge papermerge-core Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API CVE-2026-110623 7.7 HighOctober 14, 2026
• papermerge papermerge-core Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints CVE-2026-110622 7.7 HighOctober 14, 2026
• papermerge Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a ... CVE-2026-105314 Public exploit 7.5 HighOctober 5, 2026
• papermerge dms Weak password hashing in R-SOFT DMS CVE-2026-41879 8.2 HighJuly 10, 2026
• papermerge dms Insecure Direct Object Reference in R-SOFT DMS CVE-2026-41878 7.1 HighJuly 10, 2026
• papermerge dms OS Command Injection in R-SOFT DMS CVE-2026-41880 9.0 CriticalJuly 10, 2026
• papermerge dms Stored XSS in R-SOFT DMS CVE-2026-41877 5.1 MediumJuly 10, 2026
• papermerge dms OS Command Injection in R-SOFT DMS CVE-2026-41876 8.7 HighJuly 10, 2026
• papermerge dms Papermerge DMS Authorization Token improper authorization CVE-2025-10209 5.3 MediumSeptember 10, 2025
• papermerge Cross-site scripting in papermerge CVE-2020-29456 Fix available 6.1 MediumDecember 2, 2020