[ Vendor · 6 CVEs ]
docmost
CVEs affecting docmost published in the last 30 days, plus any docmost CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-65827 | 24 Sep 2026 | CVSS 6.5 | docmostDocmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0.95.0, any authenticated workspace member with edit rights… | |
| CVE-2026-52853 | 24 Sep 2026 | CVSS 5.2 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN can use the workspace… | |
| CVE-2026-48070 | 24 Sep 2026 | CVSS 7.1 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl… | |
| CVE-2026-48072 | 24 Sep 2026 | CVSS 5.3 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts… | |
| CVE-2026-48073 | 24 Sep 2026 | CVSS 4.3 | docmostDocmost is open-source collaborative wiki and documentation software. From 0.70.0 until 0.80.1, a low-privileged authenticated user who can edit an… | |
| CVE-2026-52850 | 24 Sep 2026 | CVSS 4.3 | docmostDocmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a… |