These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue [truncated]
CVE-2026-105157 is a path traversal vulnerability in RainyGao DocSys up to 2.02.85, specifically in the DocController.doGetTmp function of the /Doc/doGetTmpFile.do component. The vulnerability allows remote exploitation and has been publicly disclosed. The project vendor, RainyGao, has been informed but has not yet responded. This vulnerability can lead to unauthorized access to sensitive files, potential [truncated]
The CVE record for CVE-2026-75413 was published on 2026-08-26T21:16:41.217Z and has not been modified since then. The NVD entry indicates that DocSys V2.02.80 is vulnerable to arbitrary file downloads via the downloadDocEx.do interface without authentication, classified as CWE-552 with a CVSS score of 7.5. Limited information is available on the affected scope and vendor remediation efforts. Organizations [truncated]
The CVE-2026-67678 record details a critical file upload vulnerability in RainyGao-Hithub DocSys v.2.02.80, allowing remote code execution with a CVSS score of 9.8. Organizations using this version should prioritize patching. The vulnerability's critical severity and potential impact necessitate immediate attention from security teams and IT administrators. Affected deployments need to be identified and o [truncated]