CVE-2026-41030
Privilege Escalation via Update Service in ONLYOFFICE DesktopEditors
In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.
CVSS 3.1 · 6.2 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products