CVE-2026-75413
HIGHCVSS 7.5/10EPSS 0.17%
Last modified
CVE-2026-75413 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-75413?
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.
How severe is CVE-2026-75413?
CVE-2026-75413 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-75413?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-75370An out-of-bounds read/write vulnerability in the MessagePars…6.5
- CVE-2026-75371An integer handling flaw in the cobs_decode function of Spac…7.5
- CVE-2026-7538A vulnerability was identified in Totolink A8000RU 7.1cu.643…9.8
- CVE-2026-7539A potential security vulnerability has been identified in th…7.3
- CVE-2026-7541A denial of service vulnerability was identified in GitHub E…7.5
- CVE-2026-75411JeecgBoot v3.9.2 is vulnerable to Remote command execution. …9.8
- CVE-2026-75414In AntFlow V2.0.0, ActivitiTest.java enables users to execut…9.8
- CVE-2026-75415AntFlow V2.0.0 is vulnerable to Incorrect Access Control. Ji…7.5
- CVE-2026-75417A SQL injection vulnerability was found in YzmCMS 7.5. The i…7.2
- CVE-2026-75418A path traversal vulnerability exists in the built-in previe…7.5
- CVE-2026-75419go-wind-cms (GoWind) before 1.0.0 has a missing authorizatio…8.8
- CVE-2026-7542The Slider Revolution plugin for WordPress is vulnerable to …6.5
Are you affected by CVE-2026-75413?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST