CVE-2026-110385Published
A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Docum…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110385 · Microsoft / collected KEV context
cve-program · CVE-2026-110385
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.