EUVD-2026-66802

In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...

CVE-2026-75328

DocSys (version V2.02.85 ), an open-source document management system, is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The flaw allows an attacker to read arbitrary files accessible to the application. ...