Back Securityaffairs.Co

Attackers target unpatched ShowDoc servers via CVE-2025

Securityaffairs.Co •Pierluigi Paganini • April 14, 2026

A critical RCE flaw, tracked as CVE-2025-0520, in ShowDoc is being actively exploited, putting unpatched servers at serious risk. A critical remote code execution flaw, tracked as CVE-2025-0520 (CVSS score of 9.4), affecting ShowDoc is under active exploitation in the wild. ShowDoc is an online tool that helps IT teams documents and improve collaboration […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical ShowDoc RCE Vulnerability Exploited in the Wild A critical vulnerability in ShowDoc, a document management service, is being actively exploited. Identified as CVE-2025-0520 with a CVSS score of 9.4, the flaw allows for unrestricted file uploads and remote code execution on vulnerable servers. Attackers are targeting versions prior to 2.8.7, which was released in October 2020. Although ShowDoc has been updated to version 3.8.1, many instances remain unpatched. Exploits have been observed on a U.S.-based honeypot running a vulnerable version, indicating that the threat is not limited to China, where most instances are located. The vulnerability poses a significant risk to organizations that rely on outdated versions for internal documentation and collaboration. Cybersecurity experts recommend immediate action to mitigate the risk. 7 sources 77

Extracted Entities

Attackers target unpatched ShowDoc servers via CVE-2025

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)