CVE-2026-117563 MrDoc through 1.1.1 Broken Access Control via manage_doc_share

MrDoc through 1.1.1 contains a broken access control vulnerability in the managedocshare type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ID...