Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…CVE-2026-110385 · CVE.org · FIRST EPSS · NIST NVD · ONLYOFFICEEPSS 1.0%Oct 13, 2026
Critical9.8ONLYOFFICE Docs Server Path Traversal VulnerabilityCVE-2021-3199 · ONLYOFFICE · Docs · CISA KEV · CVE.org · FIRST EPSS · ONLYOFFICEKEVEPSS 19.4%Jan 26, 2021