Security Digest
ONLYOFFICE: known exploited vulnerabilities
1 ONLYOFFICE CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-08 | CVE-2021-3199 | ONLYOFFICE Docs ONLYOFFICE Docs Server Path Traversal Vulnerability | 2026-10-11 |