Ascensio ONLYOFFICE DesktopEditors vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ascensio ONLYOFFICE DesktopEditors: 1 record(s), with affected versions and fixes.

CVE-2026-41030 Medium · 6.2 CWE-669 Apr 16, 2026

Incorrect Resource Transfer Between Spheres in Ascensio ONLYOFFICE DesktopEditors

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.