Description
In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ascensio | ONLYOFFICE DesktopEditors | < 9.3.0 | 9.3.0 |
Medium · 6.2
CVE-2026-41030
EUVD-2026-23197
In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.
Published Apr 16, 2026 · Updated Apr 16, 2026 · Assigned by mitre