ZeroDay Findings
Sign inSign up

Findings

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

Published Apr 16, 2026 · updated Jun 17, 2026

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 16, 2026 · NIST NVD

    Detected

    In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

  2. Jun 17, 2026 · NIST NVD

    Updated

    In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

Sources

  • CVE.orgVulnerability recordCVE-2026-41030

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-41030

    In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

    nvd.nist.gov

References