Vulnerabilities
CISA Adds ProFTPD, Strapi, Apache Struts Flaws to Known Exploited Vulnerabilities Catalog
The US CISA has added five new vulnerabilities to its KEV catalog, including flaws in ProFTPD, ONLYOFFICE Docs, and Apache Struts.
ONLYOFFICE
Everything Threat Times has reported about ONLYOFFICE: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Dromara Skyeye Patched for Critical SSRF and Auth Bypass Vulnerability
A critical flaw in Dromara Skyeye allows unauthenticated attackers to overwrite files and access internal resources via a callback endpoint.
Vulnerabilities
CISA adds ONLYOFFICE Docs path traversal flaw to Known Exploited Vulnerabilities catalog
The US government mandates remediation for a critical remote code execution flaw in ONLYOFFICE Docs by October 11, 2026.