CVE-2025-45868

—

CVSS 3.1

8.8 high

EPSS

<1%p42

Published

Jul 16, 2026 (Jul 16, 2026)

Modified

Jul 20, 2026

Description

LogicalDOC Enterprise up to and for v9.1.1 is vulnerable to blind SQL injection in the ComparisonServlet component, allowing authenticated user to manipulate SQL queries via crafted input.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.