Known Vulnerabilities for Workspace by Onlyoffice
Listed below are 1 of the newest known vulnerabilities associated with "Workspace" by "Onlyoffice".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121734 json | ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read a... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-121453 json | SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace ... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120461 json | Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves command te... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120460 json | Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage ... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120325 json | A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the function writeFile of ... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120308 json | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by jo... | Not Provided | 2026-11-01 | 2026-11-02 |
| CVE-2026-120307 json | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's cont... | Not Provided | 2026-11-01 | 2026-11-02 |
| CVE-2026-120306 json | Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the bu... | Not Provided | 2026-11-01 | 2026-11-02 |
| CVE-2026-119713 json | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to se... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119287 json | Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode acce... | Not Provided | 2026-10-30 | 2026-10-30 |