CVE-2026-117563

The MrDoc application (versions through 1.1.1) is affected by a broken access control vulnerability in the manage_doc_share type 3 branch. The root cause is a missing ownership check during updates, which allows authenticated users to modify the document share settings of other users. Attackers c...

EUVD-2026-110841

MrDoc through 1.1.1 contains a broken access control vulnerability in the managedocshare type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID...