CVE-2026-51926

Name of the Vulnerable Software and Affected Versions docuForm GmbH FSM Client version 11.11c

Description An issue in the authentication mechanism allows a remote attacker to perform user enumeration through the login interface. By analyzing variations in server responses via the 'login.php' endpoint, an attacker can distinguish between valid and invalid usernames. This process can be used to identify existing accounts to facilitate brute-force or credential stuffing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.