ShowDoc CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ShowDoc CVE published 2026-10-31

CVE-2026-120203

CVE-2026-120203 is a high-severity vulnerability in ShowDoc versions 2.8.14 before 3.9.6, allowing authenticated users to execute shell commands via mockjs templates. The vulnerability is caused by the use of eval() in the Mock feature, which can be exploited by storing a template with escaped parentheses and triggering it through the MockController::infoByKey function.