CVE-2026-75413

Received Received - Intake

Any File Download in DocSys V2.02.80

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: MITRE

Description

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2026-75413

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

DocSys V2.02.80 has a vulnerability called Any File Download. This means an attacker can download any file from the system without needing to log in. They exploit the downloadDocEx.do interface by using the targetPath parameter to specify the file they want.

Detection Guidance

I don't know

Check for unauthorized access attempts to the downloadDocEx.do interface. Monitor logs for requests to this endpoint without authentication.

Impact Analysis

This vulnerability allows attackers to access sensitive files on the system, including confidential documents, configuration files, or other restricted data. It can lead to data breaches, unauthorized information disclosure, and potential further attacks on the system.

Compliance Impact

This vulnerability can violate compliance requirements such as GDPR and HIPAA by exposing personal or sensitive data without authorization. Organizations may face legal penalties, fines, or reputational damage due to non-compliance with data protection regulations.

Mitigation Strategies

Disable or restrict access to the downloadDocEx.do interface. Implement authentication requirements for this endpoint. Update DocSys to the latest version if a patch is available.

Hi! I’m here to help you understand CVE-2026-75413. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70