Documentserver (Onlyoffice) - vulnerabilities (CVEs)
1 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-14. Vendor: Onlyoffice.
CVEs of Documentserver
- CVE-2026-110652 - CVSS 6.3 (medium), 2026-10-14: ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows…
