Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-76907— LaSuite Doc: Public Documents Enumeration

Quick assessment

Affected
suitenumerique docs
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

LaSuite Doc 是一个协作式笔记、维基和文档平台。从版本 4.8.2 到 5.4.0，GET /api/v1.0/documents/search/ 端点允许传入连续七位数的文档路径，以限定后代搜索范围，且无需调用方提供公开文档的 UUID。未认证的攻击者可以提交空搜索查询，并遍历可预测的路径值，从而枚举出公开文档的子树结构，获取文档标识符、标题、创建者信息、时间戳以及树元数据。每个泄露的标识符均可通过正常的公开文档端点用于检索文档内容；此外，通过观察 403 Forbidden（禁止访问）和 404 No

CVSS 6.5 · Medium EPSS 0.25% · P15

Affected Version Matrix 1

VendorProduct Version RangeStatus
suitenumerique docs >= 4.8.2, < 5.4.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-76907

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LaSuite Doc: Public Documents Enumeration
Source: CVE Program / CVE List V5
Vulnerability Description
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated caller can submit an empty search query and iterate predictable path values to enumerate public document subtrees, obtaining document identifiers, titles, creator data, timestamps, and tree metadata. Each disclosed identifier can then be used through normal public-document endpoints to retrieve the document content, and differing 403 Forbidden and 404 Not Found responses reveal whether a guessed path exists. Authenticated users can similarly discover documents with authenticated link reach, while restricted documents remain protected. This issue is fixed in version 5.4.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
suitenumerique docs >= 4.8.2, < 5.4.0 -

II. Public POCs for CVE-2026-76907

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-76907

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-76907 (1)

Vendor Advisories for CVE-2026-76907 (1)

Vendor Pages for CVE-2026-76907 (1)

IV. Related Vulnerabilities

Same product: docs
Same vendor: suitenumerique
Same weakness: CWE-200

V. Comments for CVE-2026-76907

No comments yet

Leave a comment