Tag

Cve-2026-109201

1 brief RSS

Authenticated OS Command Injection in LogicalDOC Community Edition

LogicalDOC Community Edition versions 9.3 and earlier are vulnerable to authenticated OS command injection via maliciously crafted Velocity templates within the DocumentService.sendAsEmail function.

LogicalDOC Community Edition remote-code-execution injection vulnerability web-vulnerability authorization-bypass cve-2026-109201

3t 1c 2h ago