CVE-2021-3199

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 8, 2026

Last Seen

October 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Urgent CVE-2021-3199 Vulnerability in ONLYOFFICE Exploited in the Wild72.9

A vulnerability, CVE-2021-3199, has been identified in ONLYOFFICE Document Server versions prior to 5.6.3, allowing remote code execution through a path traversal flaw when using JWT. Exploitation is confirmed in the wild, with attackers able to manipulate image upload parameters to gain unauthorize...