Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and prior to version 0.71.0, improper authorization in Docmost allows a low-privileged authenticated user to overwrite another page's attachment within the same workspace by supplying a victim `attachmentId` to `POST /api/files/upload`. This is a remote integrity issue requiring no victim interaction. Version 0.71.0 contains a patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34213 Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and prior to version 0.71.0, improper authorization in Docmost allows … https://www.cve.org/CVERecord?id=CVE-2026-34213
Post summary
The excerpt announces CVE‑2026‑34213, describing an improper authorization issue in Docmost affecting versions 0.3.0 through 0.70.99, but does not provide PoC, exploit code, or patch information.
CVE-2026-34213 Improper Authorization in Docmost Versions 0.3.0 Through 0.70.x A... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34213 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces CVE‑2026‑34213, detailing an improper authorization flaw in Docmost 0.3.0–0.70.x and links to a vulnerability page, but does not provide further technical or exploit information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | docmost | docmost | - | - | - |