Skip to content

Vendor

docat-org vulnerabilities

1 published CVE affecting docat-org, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of docat-org alerts

Products

Latest docat-org CVEs

Newest publication first

  1. CVE-2026-61645 Docat has Arbitrary File Upload exists in Upload API

    Published
    CriticalCVSS 9.1 EPSS 0.41%

    Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.