docuForm FSM Multiple Vulnerabilities (CVE-2025-65415-65418, CVE-2026-51923-51926): RCE, XSS, LFI, IDOR

Vulnerability Summary 1. CVE-2026-51923 Vulnerability Overview: An insecure direct object reference (IDOR) vulnerability exists, allowing authenticated attackers to modify or retrieve sensitive data associated with other user accounts. Impact Scope: - Product: docuForm FSM Server - Affected Versions: 11.1c - Vulnerability Type: CWE-639: Authorization Bypass Through User-Controlled Key - Risk Level: High - CVSS 3.1: 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:A/N) 2. CVE-2026-51924 Vulnerability Overview: Lack of input validation, in combination with other vulnerabilities, allows attackers to achieve remote code execution (RCE). The application fails to properly sanitize user-supplied input, creating multiple attack vectors that allow attackers to execute arbitrary code on the system. Impact Scope: - Product: docuForm FSM Client - Affected Versions: 11.1c - Vulnerability Type: CWE-20: Improper Input Validation - Risk Level: High - CVSS 3.1: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:A/H) 3. CVE-2026-51925 Vulnerability Overview: A local file inclusion (LFI) vulnerability exists due to insufficient sanitization of input within user-supplied file path parameters. Attackers can exploit this vulnerability to read arbitrary files on the server, including sensitive configuration files, source code, or system files. Impact Scope: - Product: docuForm FSM Server - Affected Versions: 11.1c - Vulnerability Type: CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program (PHP Remote File Inclusion) - Risk Level: Medium - CVSS 3.1: 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) 4. CVE-2026-51926 Vulnerability Overview: A user enumeration vulnerability was identified in the authentication mechanism, allowing attackers to enumerate users through the login interface. Attackers can distinguish between valid and invalid usernames based on differences in server responses. This information can be used to identify existing accounts and facilitate further attacks, such as brute-forcing or credential stuffing. Impact Scope: - Product: docuForm FSM Server - Affected Versions: 11.1c - Vulnerability Type: CWE-204: Observable Response Discrepancy - Risk Level: Medium - CVSS 3.1: 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) 5. CVE-2025-65418 Vulnerability Overview: A directory traversal vulnerability exists when user-supplied input is used to construct file paths without proper validation or normalization. By providing specially crafted path sequences, attackers can bypass restricted directories and access arbitrary files or directories on the underlying file system. This vulnerability can be exploited remotely via unauthenticated requests. Impact Scope: - Product: docuForm FSM Client - Affected Versions: 11.1c - Vulnerability Type: CWE-209: Information Exposure Through an Error Message - Risk Level: High - CVSS 3.1: 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) 6. CVE-2025-65417 Vulnerability Overview: A reflected cross-site scripting (XSS) vulnerability exists where unsanitized user input is directly reflected in the application's response without proper encoding, allowing attackers to inject and execute arbitrary JavaScript code in the victim's browser. Impact Scope: - Product: docuForm FSM Client - Affected Versions: 11.1c - Vulnerability Type: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - Risk Level: High - CVSS 3.1: 8.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) 7. CVE-2025-65416 Vulnerability Overview: An arbitrary file upload vulnerability exists, allowing authenticated attackers to upload maliciously crafted files without proper validation of file type, content, or extension. Impact Scope: - Product: docuForm FSM Client - Affected Versions: 11.1c - Vulnerability Type: CWE-434: Unrestricted Upload of File with Dangerous Type - Risk Level: Medium - CVSS 3.1: 6.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) 8. CVE-2025-65415 Vulnerability Overview: The application is vulnerable to session fixation attacks because it does not generate a new session identifier upon successful authentication. Attackers can preset a session ID and induce the victim to authenticate with it. Impact Scope: - Product: docuForm FSM Client - Affected Versions: 11.1c - Vulnerability Type: CWE-384: Session Fixation - Risk Level: Medium - CVSS 3.1: 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) 9. CVE-2025-65414 Vulnerability Overview: The application discloses internal file system paths in error messages or responses, which may expose sensitive details and assist attackers in further reconnaissance or exploitation. Impact Scope: - Product: docuForm FSM Client - Affected Versions: 11.1c - Vulnerability Type: CWE-209: Information Exposure Through an Error Message - Risk Level: Medium - CVSS 3.1: 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) 10. CVE-2025-61315 Vulnerability Overview: A stored cross-site scripting (XSS) vulnerability exists in the component due to improper neutralization of user-controllable input before it is embedded into

Goal Reached Thanks to every supporter — we hit 100%!

docuForm FSM Multiple Vulnerabilities (CVE-2025-65415-65418, CVE-2026-51923-51926): RCE, XSS, LFI, IDOR

More from this source