Is CVE-2026-93643 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-93643?

CVE-2026-93643 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-93643

Description

When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra.