CVE-2026-75327

Received Received - Intake

Arbitrary File Upload in DocSys-master V2.02.85

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: MITRE

Description

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2026-75327

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an arbitrary file upload issue in DocSys-master V2.02.85. It exists in the uploadMarkdownPic interface of the DocController.java file. An attacker could exploit this to upload malicious files to the server without proper validation.

Impact Analysis

This vulnerability could allow attackers to upload malicious files to the server. This may lead to remote code execution, data theft, or unauthorized access to the system. It could also be used to deface the application or distribute malware.

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR and HIPAA requirements for data protection and security. Non-compliance could result in legal penalties, fines, and reputational damage.

Mitigation Strategies

Disable or restrict access to the uploadMarkdownPic interface in DocController.java. Review uploaded files for malicious content and ensure proper file type validation is implemented.

Hi! I’m here to help you understand CVE-2026-75327. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70