CyberSecBulletin

Newgensoft vulnerabilities

We track 2 vulnerabilities in Newgensoft products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Newgensoft vulnerabilities

  • 7.5 High severity

    Omniapp: Improper Access Control

    CVE-2025-69908Newgensoft

    An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource.

  • 8.2 High severity

    Omnidocs: Missing Authorization

    CVE-2025-65742Newgensoft

    An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request.