CVE-2026-108750 in OpenDocMan
Zusammenfassung
von MITRE • 11.10.2026
OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundreds of megabytes, crashing PHP workers and degrading availability.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.