CVE-2026-93643 in Collaboration Suite
Zusammenfassung
von MITRE • 25.09.2026
When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.