CVE-2026-51924

HIGH

docuForm Client 11.11c - Remote Code Execution via File Upload and Report.php Component

Title source: llm
STIX 2.1

Description

An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the file upload and report.php component

References (2)

Core 2

Scores

CVSS v3 8.1
EPSS 0.0033
EPSS Percentile 25.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-639
Status published
Published Jul 09, 2026
Tracked Since Jul 10, 2026