Skip to content
OpenAdvisories

Vendor

OpenDocMan

2 known vulnerabilities.

Products

OpenDocMan 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108750

    OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extraction

    OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundr…

    OpenDocMan OpenDocMan