Known Vulnerabilities for Document Server by Onlyoffice
Listed below are 10 of the newest known vulnerabilities associated with "Document Server" by "Onlyoffice".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61736 json | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=* combi... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-59832 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepath route handler serveSni... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-59715 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.16 before 0.10.0, the Socket.I... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-59096 json | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document from ... | Not Provided | 2026-07-02 | 2026-07-14 |
| CVE-2026-58469 json | GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string... | Not Provided | 2026-07-07 | 2026-07-08 |
| CVE-2026-55659 json | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embe... | Not Provided | 2026-07-10 | 2026-07-13 |
| CVE-2026-54350 json | Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app rea... | Not Provided | 2026-06-26 | 2026-06-30 |
| CVE-2026-54267 json | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other lang... | Not Provided | 2026-06-22 | 2026-06-22 |
| CVE-2026-54022 json | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ydoc:... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-52890 json | Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment d... | Not Provided | 2026-07-15 | 2026-07-16 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Onlyoffice | Document Server | 6.1.1 | |||
| Application | Onlyoffice | Document Server | 6.1.0 | |||
| Application | Onlyoffice | Document Server | 6.0.2 | |||
| Application | Onlyoffice | Document Server | 6.0.1 | |||
| Application | Onlyoffice | Document Server | 6.0.0 | |||
| Application | Onlyoffice | Document Server | 5.6.5 | |||
| Application | Onlyoffice | Document Server | 5.6.4 | |||
| Application | Onlyoffice | Document Server | 5.6.3 | |||
| Application | Onlyoffice | Document Server | 5.6.2 | |||
| Application | Onlyoffice | Document Server | 5.6.1 | |||
| Application | Onlyoffice | Document Server | 5.6.0 | |||
| Application | Onlyoffice | Document Server | 5.5.3 | |||
| Application | Onlyoffice | Document Server | 5.5.1 | |||
| Application | Onlyoffice | Document Server | 5.5.0 | |||
| Application | Onlyoffice | Document Server | 5.4.2 | |||
| Application | Onlyoffice | Document Server | 5.4.1 | |||
| Application | Onlyoffice | Document Server | 5.4.0-2 | |||
| Application | Onlyoffice | Document Server | 5.3.4 | |||
| Application | Onlyoffice | Document Server | 5.3.2 | |||
| Application | Onlyoffice | Document Server | 5.3.1 |