Incorrect Authorization in Official Document Management System by 2100 Technology
CVE-2026-1514

7.1HIGH

Key Information:

Vendor

2100 Technology

Status
Official Document Management System
Vendor
CVE Published:
28 January 2026

What is CVE-2026-1514?

The Official Document Management System developed by 2100 Technology contains an Incorrect Authorization vulnerability. This issue allows authenticated remote attackers to exploit the system by modifying front-end code, granting them access to all official documents. Such a breach can lead to unauthorized viewing and manipulation of sensitive information, posing significant risk to the integrity and confidentiality of the data managed by the system.

Affected Version(s)

Official Document Management System 5.0.77 <= 5.0.98

References

https://www.twcert.org.tw/tw/cp-132-10658-c5a07-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10659-264cd-2.html
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.