suitenumerique has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was September 2026 with 3. The median CVSS is 6.2 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.2
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-92800Medium· 6.8Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents49CVE-2026-76907Medium· 6.5LaSuite Doc is a collaborative note taking, wiki and documentation platform36CVE-2026-91081Medium· 5.8Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID32CVE-2026-111169Low· 3.1La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access17
suitenumerique vulnerabilities
CVEs affecting suitenumerique, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-111169Low· 3.1La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request …
CVE-2026-76907Medium· 6.5LaSuite Doc is a collaborative note taking, wiki and documentation platform
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller …
CVE-2026-92800Medium· 6.8PoCDocs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket s…
CVE-2026-91081Medium· 5.8Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID
Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID. Attackers can exploit DNS time-of-check-tim…