CVE-2026-51923

Deferred Deferred - Pending Action

Insecure Direct Object Reference in docuForm GmbH Client v11.11c

Publication date: 2026-07-09

Last updated on: 2026-07-10

Assigner: MITRE

Description

An Insecure Direct Object Reference (IDOR) vulnerability exists in docuForm GmbH Client v.11.11c allowing a remote attacker to execute arbitrary code via the user settings component, and modify or retrieve sensitive data associated with other users’ accounts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-09

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-10

EPSS Evaluated

N/A

NVD

CVE-2026-51923

Affected Vendors & Products

Vendor	Product	Version / Range
docuform_gmbh	client	11.11c

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Compliance Impact

The vulnerability allows a remote attacker to execute arbitrary code and access or modify sensitive data associated with other users' accounts. This unauthorized access and potential data breach could lead to non-compliance with data protection regulations such as GDPR and HIPAA, which require strict controls over personal and sensitive information to prevent unauthorized disclosure or modification.

Specifically, the exposure of sensitive user data through this Insecure Direct Object Reference (IDOR) vulnerability may violate principles of data confidentiality and integrity mandated by these standards.

Executive Summary

This vulnerability is an Insecure Direct Object Reference (IDOR) found in docuForm GmbH Client version 11.11c. It allows a remote attacker to exploit the user settings component to execute arbitrary code and to access, modify, or retrieve sensitive data belonging to other users.

Impact Analysis

The vulnerability can have serious impacts including unauthorized execution of arbitrary code on the affected system and unauthorized access to sensitive data of other users. This can lead to data breaches, loss of data integrity, and potential compromise of user accounts.

Hi! I’m here to help you understand CVE-2026-51923. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70