CVE Intelligence

Newgensoft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Newgensoft products: 2 record(s), with severity, exploitation and fixes.

Omnidocs 1Omniapp 1

Exploited only (KEV) →

CVE-2025-69908 High · 7.5 CWE-284 Jan 23, 2026
Improper Access Control in Newgensoft Omniapp
An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource.
CVE-2025-65742 High · 8.2 CWE-862 Dec 15, 2025
Missing Authorization in Newgensoft Omnidocs
An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request.