https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:01:50.985662+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-17248 cnvd-2021-17248 2026-10-10T19:01:50.988736+00:00 cnvd-2021-17248 https://cve.radiocsirt.org/vuln/euvd-2026-24939 EUVD-2026-24939 2026-10-10T19:01:50.988770+00:00 EUVD-2026-24939 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25831 fkie_cve-2021-25831 2026-10-10T19:01:50.988787+00:00

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. An attacker must request the conversion of the crafted file from PPTT into PPTX format. Using the chain of two other bugs related to improper string handling, a remote attacker can obtain remote code execution on DocumentServer.

 https://cve.radiocsirt.org/vuln/ghsa-m252-hx7q-7p3h GHSA-m252-hx7q-7p3h 2026-10-10T19:01:50.988827+00:00

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. An attacker must request the conversion of the crafted file from PPTT into PPTX format. Using the chain of two other bugs related to improper string handling, a remote attacker can obtain remote code execution on DocumentServer.

 https://cve.radiocsirt.org/vuln/gsd-2021-25831 gsd-2021-25831 2026-10-10T19:01:50.988845+00:00 gsd-2021-25831