CVE-2026-75328

DocSys (version V2.02.85 ), an open-source document management system, is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The flaw allows an attacker to read arbitrary files accessible to the application. ...