Skip to content
Threat Feed
Subscribe

Vendor

LogicalDOC

1 brief RSS
high advisory

Authenticated OS Command Injection in LogicalDOC Community Edition

LogicalDOC Community Edition versions 9.3 and earlier are vulnerable to authenticated OS command injection via maliciously crafted Velocity templates within the DocumentService.sendAsEmail function.

LogicalDOC Community Edition remote-code-execution injection vulnerability web-vulnerability authorization-bypass cve-2026-109201
3t 1c