Threats Tagged 'cve-2026-110385'
View all threats tagged with 'cve-2026-110385'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-110385'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-110385 is a high-severity remote code execution vulnerability in ONLYOFFICE Document Server versions before 10.0.0. It allows an authenticated attacker with a valid Inbox-compatible JWT token to execute arbitrary OS commands as the ds service account. The vulnerability arises from improper processing of user-controlled converter XML in the Document Builder API, enabling path override and arbitrary file write outside the intended directory. This can lead to overwriting critical configuration files and executing commands during subsequent Document Builder jobs. Join the discussion | CVE Database V5 | 10/14/2026, 00:24:53 UTC Added: 10/14/2026, 00:49:05 UTC |
Showing 1 to 1 of 1 result