> ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers

[SOURCE] The Hacker News [DATE: 14/04/2026 05:50] [LANGUAGE: EN]

A critical security vulnerability impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the wild.
The vulnerability in question is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score of 9.4 out of 10.0.
It relates to a case of unrestricted file upload that stems from improper validation of

[messages.read_original_source] →