CyberSecBulletin

Documenso vulnerabilities

We track 2 vulnerabilities in Documenso products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Documenso vulnerabilities

  • 7.5 High severity

    documenso: Missing Authentication for Critical Functionality

    CVE-2026-82472Documenso

    Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or f

  • 8.2 High severity

    Documenso: User Interface (UI) Misrepresentation of Critical Information

    CVE-2024-52271Documenso

    User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will