Collaboration & Productivity

Security Notices
CISA Adds ONLYOFFICE Docs Path Traversal to KEV
10/08/2026

ONLYOFFICE issued CISA KEV: CVE-2021-3199 for ONLYOFFICE Docs. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
CISA Adds Microsoft SharePoint Code Injection to KEV
09/25/2026

CISA lists an exploited SharePoint code-injection flaw requiring a low-privilege authenticated attacker but no further user interaction. Update every affected farm server through Microsoft's supported workflow and preserve evidence for forensic triage.

Read this guide