Hackers Exploit Critical ShowDoc RCE Flaw in Ongoing Attacks

Gbhackers •Divya • April 14, 2026

Cybersecurity researchers have highlighted a critical vulnerability in ShowDoc, a widely used online document-sharing platform designed for IT teams. Tracked as CNVD-2020-26585, this severe security flaw allows unauthenticated remote code execution (RCE) on compromised servers. The vulnerability poses a significant risk to organizations relying on outdated versions of the software for internal collaboration, as it […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical ShowDoc RCE Vulnerability Exploited in the Wild A critical vulnerability in ShowDoc, a document management service, is being actively exploited. Identified as CVE-2025-0520 with a CVSS score of 9.4, the flaw allows for unrestricted file uploads and remote code execution on vulnerable servers. Attackers are targeting versions prior to 2.8.7, which was released in October 2020. Although ShowDoc has been updated to version 3.8.1, many instances remain unpatched. Exploits have been observed on a U.S.-based honeypot running a vulnerable version, indicating that the threat is not limited to China, where most instances are located. The vulnerability poses a significant risk to organizations that rely on outdated versions for internal documentation and collaboration. Cybersecurity experts recommend immediate action to mitigate the risk. 7 sources 77

Extracted Entities

Hackers Exploit Critical ShowDoc RCE Flaw in Ongoing Attacks

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)