CVE-2026-109206Published
LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-109206 · Microsoft / collected KEV context
cve-program · CVE-2026-109206
- https://github.com/logicaldoc/community/discussions/119
- https://github.com/logicaldoc/community/commit/4e93a69526ae7fe50f670b85b3fc57181f3de3f7
- https://github.com/logicaldoc/community/blob/9.3/logicaldoc-webapp/src/main/java/com/logicaldoc/web/AvatarServlet.java#L63
- https://github.com/logicaldoc/community
- https://www.vulncheck.com/advisories/logicaldoc-community-edition-through-9.3-username-enumeration-via-avatarservlet
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.