
The Hacker News
Security•2026-04-14
ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers
ShowDoc, a document management service, has a critical file upload vulnerability (CVE-2025-0520, CVSS 9.4) being actively exploited to achieve remote code execution.