R-Soft Serwis Dms
5 CVEs affecting R-Soft Serwis Dms. Latest disclosed: 2026-07-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-41880 | | 2026-07-10 | R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command execution functions accept user-controllab… | |
CVE-2026-41879 | | 2026-07-10 | R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials… | |
CVE-2026-41878 | | 2026-07-10 | R-SOFT DMS is vulnerable to Insecure Direct Object Reference (IDOR) attack in multiple file download endpoints. The application fetches files from the database… | |
CVE-2026-41877 | | 2026-07-10 | R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacker can inject arbitrary HTML and JS into the name of the file being up… | |
CVE-2026-41876 | | 2026-07-10 | R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and… |