CVE-2026-109202CWE-862broken-access-control

CVE-2026-109202

Medium · published October 12, 2026

CVSS v3.1

6.5

EPSS

Percentile

16.4

In the wild

Unconfirmed

What it is

LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by supplying a folderId parameter. Attackers can request /zip-export with a restricted folder ID, since ZipExport.addFolderDocuments() skips READ and DOWNLOAD permission checks, to download all of its documents in a ZIP archive.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: 7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00257 · 16.4th percentile
Weakness: CWE-862 · Missing Authorization
Published: 2026-10-12T18:17Z

References (6)

https://github.com/logicaldoc/community · [email protected]https://github.com/logicaldoc/community/blob/9.3/logicaldoc-core/src/main/java/com/logicaldoc/core/transfer/ZipExport.java#L233 · [email protected]https://github.com/logicaldoc/community/blob/9.3/logicaldoc-webapp/src/main/java/com/logicaldoc/web/ExportZip.java#L57 · [email protected]https://github.com/logicaldoc/community/commit/648047ee0ec95c294bb983e511fed60dbc67977f · [email protected]https://github.com/logicaldoc/community/discussions/119 · [email protected]https://www.vulncheck.com/advisories/logicaldoc-community-edition-through-9.3-missing-authorization-via-zip-export-servlet · [email protected]

EPSS history

Timeline

14 OCT 03:27Z
EPSS moved — → 0%
epss
12 OCT 13:39Z
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
cvelistv5
12 OCT 13:39Z
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
cvelistv5