What’s Vulnerable › Products

ONLYOFFICE DocumentServer vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ONLYOFFICE DocumentServer version is affected

Latest ONLYOFFICE DocumentServer vulnerabilities

• CVE-2026-110652 — ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass (CVSS 4.0)