CVE Catalog
CVE-2026-39770
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.42%
35th percentile - higher than 35% of all known CVEs
Summary
Unauthenticated Arbitrary File Upload vulnerability in Doctreat versions up to 1.7.0. An attacker can upload malicious files without authentication.
Risk Assessment
Potential for placing malware on the server, potentially leading to system compromise.
Recommendation
Update Doctreat to a version that includes a fix for this vulnerability.
Other vulnerabilities in Doctreat
Original NVD description (English source)
Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS