CVE-2026-51923

Name of the Vulnerable Software and Affected Versions docuForm GmbH Client version 11.11c

Description An Insecure Direct Object Reference (IDOR) issue exists in the user settings component. This allows a remote attacker to execute arbitrary code and modify or retrieve sensitive data belonging to other user accounts. IDOR is a type of access control flaw where an application provides direct access to objects based on user-supplied input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.