{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:31.610Z","products":["onlyoffice"],"actNowTotal":1,"results":[{"query":"onlyoffice","matched":1,"actNow":1,"events":[{"id":"kev-2026-10-08-onlyoffice-docs","url":"https://securitythreatpulse.com/events/kev-2026-10-08-onlyoffice-docs","title":"ONLYOFFICE Docs: attackers can read or change files","verdict":"act_now","verdictReason":"Attacks are confirmed. The severity score is critical (9.8).","tier":"now","rankScore":3,"rankWhy":["Exploitation is confirmed by an authoritative source."],"rulesVersion":"v3","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2021-3199"],"vendor":"ONLYOFFICE","product":"Docs","affectedProducts":[{"kind":"direct","slug":"onlyoffice/docs","vendor":"ONLYOFFICE","product":"Docs","evidence":["kev"],"vendorKey":"onlyoffice","productKey":"docs"}],"category":{"id":"collaboration","label":"Documents and collaboration","why":"It holds shared documents and internal pages.","doThis":"Patch it, or ask your provider whether they have."},"summary":"ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.","cvss":9.8,"epss":0.30244,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-10-08","kevDueDate":"2026-10-11","firstSeenAt":"2026-10-08T00:00:00.000Z","updatedAt":"2026-11-08T16:37:40.566Z","newestEvidenceAt":"2026-11-07T07:33:46.646Z"}]}]}