What’s Vulnerable › Products

LogicalDOC Community Edition vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your LogicalDOC Community Edition version is affected

Latest LogicalDOC Community Edition vulnerabilities

• CVE-2026-109206 — LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet (CVSS 5.3)
• CVE-2026-109205 — LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet (CVSS 7.5)
• CVE-2026-109204 — LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket (CVSS 6.3)
• CVE-2026-109203 — LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet (CVSS 6.5)
• CVE-2026-109202 — LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet (CVSS 6.5)
• CVE-2026-109201 — LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService (CVSS 8.3)
• CVE-2026-109200 — LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href (CVSS 6.4)
• CVE-2026-109199 — LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template (CVSS 8.8)
• CVE-2026-109170 — LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter (CVSS 6.5)
• CVE-2026-109169 — LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter (CVSS 6.5)