# docuForm vulnerabilities Source: https://junglewise.ai/threats/vendors/docuform Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/docuform.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in docuForm: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-51926, was published on 9 July 2026. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 17 (0 critical, 0 exploited in the wild) ## About docuForm docuForm is a software provider specializing in output management and managed print services. ## Latest docuForm vulnerabilities - [CVE-2026-51926: docuForm FSM user enumeration in login.php](https://junglewise.ai/threats/cve-2026-51926-docuform-fsm-user-enumeration-in-login-php) (info, CVSS 5.3, published 9 Jul 2026) - [CVE-2026-51925: docuForm FSM Server Local File Inclusion in dfm-menu_report.php](https://junglewise.ai/threats/cve-2026-51925-docuform-fsm-server-local-file-inclusion-in-dfm-menu-report-php) (info, CVSS 6.5, published 9 Jul 2026) - [CVE-2026-51923: docuForm FSM Server IDOR in user management](https://junglewise.ai/threats/cve-2026-51923-docuform-fsm-server-idor-in-user-management) (info, CVSS 8.1, published 9 Jul 2026) - [CVE-2025-65418: docuFORM Managed Print Service Client directory traversal](https://junglewise.ai/threats/cve-2025-65418-docuform-managed-print-service-client-directory-traversal) (high, CVSS 7.5, published 11 May 2026) - [CVE-2025-65417: docuFORM Managed Print Service Client reflected XSS in login page](https://junglewise.ai/threats/cve-2025-65417-docuform-managed-print-service-client-reflected-xss-in-login-page) (info, CVSS 8.1, published 11 May 2026) - [CVE-2025-65416: docuFORM Managed Print Service Client arbitrary file upload in pmupdate.php](https://junglewise.ai/threats/cve-2025-65416-docuform-managed-print-service-client-arbitrary-file-upload-in) (info, CVSS 6.3, published 11 May 2026) - [CVE-2025-65415: docuFORM Managed Print Service Client session fixation in login page](https://junglewise.ai/threats/cve-2025-65415-docuform-managed-print-service-client-session-fixation-in-login) (info, CVSS 5.4, published 11 May 2026) - [CVE-2025-61314: docuForm Mercury MPS stored XSS in dfm-menu_orderopt.php](https://junglewise.ai/threats/cve-2025-61314-docuform-mercury-mps-stored-xss-in-dfm-menu-orderopt-php) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61313: docuForm Mercury Managed Print Services XSS in dfm-menu_markeralerts.php](https://junglewise.ai/threats/cve-2025-61313-docuform-mercury-managed-print-services-xss-in-dfm-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61312: docuFORM Mercury Managed Print Services Stored XSS in acc-menu_pricess.php](https://junglewise.ai/threats/cve-2025-61312-docuform-mercury-managed-print-services-stored-xss-in-acc-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61311: docuForm Mercury Managed Print Services XSS in dfm-menu_alerts.php](https://junglewise.ai/threats/cve-2025-61311-docuform-mercury-managed-print-services-xss-in-dfm-menu-alerts) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61310: docuForm Mercury Managed Print Services Stored XSS in acc-menu_billings.php](https://junglewise.ai/threats/cve-2025-61310-docuform-mercury-managed-print-services-stored-xss-in-acc-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61309: docuForm Mercury Managed Print Services XSS in dfm-menu_departments.php](https://junglewise.ai/threats/cve-2025-61309-docuform-mercury-managed-print-services-xss-in-dfm-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61308: docuForm Mercury Managed Print Services XSS in maintenance menu](https://junglewise.ai/threats/cve-2025-61308-docuform-mercury-managed-print-services-xss-in-maintenance-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61307: docuForm Mercury Managed Print Services XSS in acc-menu_papers.php](https://junglewise.ai/threats/cve-2025-61307-docuform-mercury-managed-print-services-xss-in-acc-menu-papers) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61306: docuForm Mercury Managed Print Services XSS in coverage alerts](https://junglewise.ai/threats/cve-2025-61306-docuform-mercury-managed-print-services-xss-in-coverage-alerts) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61305: docuForm Mercury Managed Print Services XSS in dfm-menu_firmware.php](https://junglewise.ai/threats/cve-2025-61305-docuform-mercury-managed-print-services-xss-in-dfm-menu-firmware) (info, CVSS 7.3, published 11 May 2026) ## Most severe docuForm vulnerabilities - [CVE-2025-65418: docuFORM Managed Print Service Client directory traversal](https://junglewise.ai/threats/cve-2025-65418-docuform-managed-print-service-client-directory-traversal) (high, CVSS 7.5, published 11 May 2026) - [CVE-2026-51923: docuForm FSM Server IDOR in user management](https://junglewise.ai/threats/cve-2026-51923-docuform-fsm-server-idor-in-user-management) (info, CVSS 8.1, published 9 Jul 2026) - [CVE-2025-65417: docuFORM Managed Print Service Client reflected XSS in login page](https://junglewise.ai/threats/cve-2025-65417-docuform-managed-print-service-client-reflected-xss-in-login-page) (info, CVSS 8.1, published 11 May 2026) - [CVE-2025-61314: docuForm Mercury MPS stored XSS in dfm-menu_orderopt.php](https://junglewise.ai/threats/cve-2025-61314-docuform-mercury-mps-stored-xss-in-dfm-menu-orderopt-php) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61313: docuForm Mercury Managed Print Services XSS in dfm-menu_markeralerts.php](https://junglewise.ai/threats/cve-2025-61313-docuform-mercury-managed-print-services-xss-in-dfm-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61312: docuFORM Mercury Managed Print Services Stored XSS in acc-menu_pricess.php](https://junglewise.ai/threats/cve-2025-61312-docuform-mercury-managed-print-services-stored-xss-in-acc-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61311: docuForm Mercury Managed Print Services XSS in dfm-menu_alerts.php](https://junglewise.ai/threats/cve-2025-61311-docuform-mercury-managed-print-services-xss-in-dfm-menu-alerts) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61310: docuForm Mercury Managed Print Services Stored XSS in acc-menu_billings.php](https://junglewise.ai/threats/cve-2025-61310-docuform-mercury-managed-print-services-stored-xss-in-acc-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61309: docuForm Mercury Managed Print Services XSS in dfm-menu_departments.php](https://junglewise.ai/threats/cve-2025-61309-docuform-mercury-managed-print-services-xss-in-dfm-menu) (info, CVSS 7.3, published 11 May 2026) - [CVE-2025-61308: docuForm Mercury Managed Print Services XSS in maintenance menu](https://junglewise.ai/threats/cve-2025-61308-docuform-mercury-managed-print-services-xss-in-maintenance-menu) (info, CVSS 7.3, published 11 May 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## docuForm technologies - [docuForm Mercury Managed Print Services](https://junglewise.ai/threats/technologies/mercury-managed-print-services): 9 vulnerabilities - [docuForm Managed Print Service Client](https://junglewise.ai/threats/technologies/managed-print-service-client): 4 vulnerabilities - [docuForm FSM Server](https://junglewise.ai/threats/technologies/fsm-server): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "docuForm vulnerabilities", https://junglewise.ai/threats/vendors/docuform, 9 November 2026.