PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-75328 DocSys CVE debrief

CVE-2026-75328 is a high-severity vulnerability in DocSys-master V2.02.85, allowing for arbitrary file reads via the downloadDocEx interface. The CVE record was published on 2026-08-26T22:16:28.980Z and was last modified on 2026-09-09T16:04:24.933Z. The NVD entry is currently Deferred. Defenders and security teams responsible for DocSys-master V2.02.85 deployments should assess exposure and verify the vulnerability's impact in their environment. This vulnerability has a CVSS score of 7.5, indicating high severity. The vulnerability allows for arbitrary file reads, which could lead to unauthorized access to sensitive information. Affected product deployments should be identified, a

Vendor
DocSys
Product
DocSys-master
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-26
Original CVE updated
2026-09-09
Advisory published
2026-08-26
Advisory updated
2026-09-09

Who should care

Defenders and security teams responsible for DocSys-master V2.02.85 deployments should assess exposure and verify the vulnerability's impact in their environment.

Why it matters

CVE-2026-75328 is a high-severity vulnerability in DocSys-master V2.02.85, allowing for arbitrary file reads. Defenders should prioritize verifying the vulnerability's impact and assessing exposure.

  • Verify potential file reads via the downloadDocEx interface.
  • Assess exposure of DocSys-master V2.02.85 deployments.
  • Consider implementing compensating controls to mitigate potential risks.
  • Review and update security configurations for the affected interface.

Technical summary

The downloadDocEx interface in DocSys-master V2.02.85 has an arbitrary file read vulnerability. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a high severity score of 7.5. This vulnerability allows for arbitrary file reads, which could lead to unauthorized access to sensitive information. The vulnerability is caused by a lack of proper input validation in the downloadDocEx interface, allowing an attacker to read arbitrary files. Defenders should prioritize verifying the vulnerability's impact and assessing exposure, as the CVE has a

Defensive priority

Defenders should prioritize verifying the vulnerability's impact and assessing exposure, as the CVE has a high CVSS score of 7.5.

Recommended defensive actions

  • Verify the vulnerability's impact and assess exposure in your environment.
  • Review the downloadDocEx interface for potential vulnerabilities.
  • Consider implementing compensating controls to mitigate potential risks.

Evidence notes

The vulnerability is described as an arbitrary file read issue in the downloadDocEx interface of DocSys-master V2.02.85. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a high severity score.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-75328 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-75328

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-75328 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-75328

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://github.com/fangtang7/CVE/blob/main/DocSys/DocSys%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.md

    [email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.