Search
Find merged stories by title or summary.
CVE-2026-82472 - Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf
CVE ID : CVE-2026-82472 Published : Aug. 29, 2026, 5:17 p. m. • 3 hours, 57 minutes ago Description : Documenso before 2. 13. 0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked document records. Severity: 7.5 • HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
NVD-CVE-2026-82472 - National Institute of Standards and Technology (.gov)
NVD-CVE-2026-82472 National Institute of Standards and Technology (.gov)
cve-2026-82472
Documenso before 2. 13. 0 Unauthenticated File Upload via /api/files/upload-pdf
You've reached the end of current stories for this search.
