Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker can overwrite sensitive configuration files or place malicious files on the Docat web server. Depending on deployment context, uploaded content can enable remote code execution or cross-site scripting intended to steal cookies or redirect users to malicious websites. Version 1.6.0 mitigates filename-based path traversal; remediation of unrestricted file types or deployment-dependent malicious-content effects is not established by the verified patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 docat-org docat: arbitrary file upload in upload API risks code execution (CVE-2026-61645) Attackers can overwrite configuration files or plant malicious files on the server through the upload API. Patch → 1.6.0 https://cve.now/CVE-2026-61645
🚨 CVE-2026-61645 (9.1) 🚨 Docat, a tool for hosting versioned documentation, lets anyone with a login upload files onto its server and overwrite its own config files. No fixed version is named. Docat 1.6.0 blocks traversal in filenames, but not the file types. https://t.co/bdIyz8FSLV