CVE-2026-39770

Doctreat versions up to 1.7.0 are vulnerable to an unauthenticated arbitrary file upload, allowing attackers to upload malicious files without authentication. This critical vulnerability can lead to remote code execution and complete system compromise. Organizations using affected versions should prioritize immediate patching to mitigate potential exploitation risks.