ShowDoc: Critical Flaw Actively Exploited on Unpatched Servers

A critical vulnerability (CVE-2025-0520) affecting ShowDoc software is currently being exploited by attackers on unpatched servers.

Published 14sem24 sources✓ ConfirmedMajor

Lire en français

≈ 18sSpeed

The fact

This flaw enables remote code execution (RCE), granting full control to attackers.

Administrators must urgently apply security patches to protect their installations.

24 sources — click a link to read an article on the topic:

RFI

Explore this topic

ShowDoc #RCE #exploit actif #ShowDoc #type:faille

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Story timeline

Apr 11Satellite imagery provider restricts Iran coverage following US pressure

Apr 13Pentesting: Claude Mythos automates cybersecurity testing

Apr 13FBI warns: routers vulnerable to coordinated Russian hackers

Apr 13Phishing 3.0: hijackers exploit your real reservation data

Apr 13OpenAI founder Sam Altman's home targeted in two separate attacks

Apr 13OpenAI revokes certificate following supply chain vulnerability

Apr 13North Korea targets Facebook to spread banking malware

Apr 13Basic-Fit data breach: one million members affected

Apr 13Basic-Fit data breach: one million members affected, personal data exposed

Apr 13Rockstar Games hacked again, downplays impact after second breach

Apr 13Hijacked crosswalk reveals overlooked vulnerability in urban infrastructure systems

Apr 13French government secures administration: authentication, DNS and messaging

Apr 13One million Basic-Fit customers exposed in cyberattack

Apr 13Weekly security recap: fiber optic spying, Windows rootkit, AI hunting

Apr 13FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud

Apr 13French cyber warriors engage in Locked Shields 2026 exercise

Apr 13French cyber defense participates in European allied exercise

Apr 13French Authorities Warn of Rising Cybersexploitation on TikTok

Apr 13Crypto exchange Kraken targeted in extortion attempt but says there was no breach

Apr 13Insurance sector prioritizes cyber risk and geopolitical impact

Apr 13JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil

Apr 13Claude Mythos: Anthropic Confronts Major Cybersecurity Challenges

Apr 13Kraken Refuses to Negotiate After Extortion Attempt Over Stolen Data

Apr 13Tech support scams deepen as fraudsters hide behind additional fraud

Apr 14Man faces federal charges over attack on OpenAI CEO Sam Altman's home

Apr 14OpenAI CEO Altman attacked: 20-year-old Texan charged with attempted murder

Apr 14Massive data breach exposes 3.5 million French students

Apr 14Fortinet and Microsoft Critical Flaws Added to US Cybersecurity Watchlist

Apr 14ShowDoc: Critical Flaw Actively Exploited on Unpatched Serversthis article

Apr 14Kraken hit by extortion attempts and customer data theft

Apr 14Malware Campaign: 108 Chrome Extensions Steal User Data

Apr 14Hyperbridge protocol hack: one billion DOT tokens created by attacker

Apr 14Massive crypto losses: $464 million stolen in first quarter

Apr 14Analysis of 216 Million Security Findings: Critical Risks Up 400%

Apr 14Ten Taiwanese accused of espionage for Beijing

Apr 14Mirax Android RAT Converts Devices Into SOCKS5 Proxies, Infects 220,000 Users

Apr 14Mother and son freed 20 hours after cryptocurrency-linked abduction

Apr 14Fake Ledger App on Apple App Store Steals $9.5 Million in Cryptocurrency

Apr 14Has Google's AI Watermarking System Been Reverse-Engineered?

Apr 14Google Enhances Pixel Security with Rust-Based DNS Parser

Apr 14Fake Ledger Live app steals $9.5 million from victims on Apple App Store

Apr 14Malicious Ad Fraud Campaign Exploits Google Discover Platform

Apr 14Critical PHP Composer security vulnerabilities patched

Apr 14Cyberattack on Education Ministry: student data compromised

Apr 14Cyberattack on Education Ministry, student data compromised

Apr 14DeFi platform warns users after security breach

Follow topic →

Auto-synthesis from 24 media sources · identified on April 14, 2026

← Back to home

The fact

Story timeline

Read more

Critical Security Vulnerability Found in React Server Components

Critical flaw in libssh2: exploit code published

Vulnerability detected in SPIP content management system

Apache Tika vulnerability exposes servers to malicious XML injections

Vulnérabilité de déni de service dans React via react-server-dom signalée en 2026

Windows Shell Vulnerability CVE-2026-32202 Moves From Patch to Active Exploitation