CVE-2026-52850Medium· 4.3▾ SunlitDocmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a private space can call the transclusion / sync-block lookup API with a known sourcePageId a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a private space can call the transclusion / sync-block lookup API with a known sourcePageId and transclusionId pair because the lookup does not enforce private space membership before resolving the source page. The API can return confidential sync-block content and source page metadata even though the normal page APIs deny access to the same page. This issue is fixed in version 0.90.1.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48073Medium· 4.3Docmost is open-source collaborative wiki and documentation software
CVE-2026-52853Medium· 5.2Docmost is open-source collaborative wiki and documentation software
CVE-2026-48070High· 7.1Docmost is open-source collaborative wiki and documentation software
CVE-2026-65827Medium· 6.5Docmost is open-source collaborative wiki and documentation software
CVE-2026-48072Medium· 5.3Docmost is open-source collaborative wiki and documentation software
CVE-2026-54671High· 8.8WeGIA is a web manager for charitable institutions