CVE-2026-109201

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unauthorized documents. Attackers can call copy, getExtractedText, deleteVersion, reindex, deleteLink, or restore via SOAP...

CVE-2026-109201

LogicalDOC Community Edition through version 9.3 contains a missing authorization vulnerability in the SoapDocumentService operations. This flaw allows authenticated users to access, disclose, delete, or tamper with unauthorized documents by calling functions such as copy , getExtractedText , del...

PT-2026-110587

Name of the Vulnerable Software and Affected Versions LogicalDOC Community Edition versions prior to 9.4 Description Authenticated users can access and modify unauthorized documents due to missing authorization in SoapDocumentService operations. By using sequential document IDs via SOAP or the...