[onlyoffice]

July 23, 2026

• OnlyShells chain breaks ONLYOFFICE Desktop Editors in three steps — zero-click XSS → RCE → SYSTEM, mitigated in 9.3.0 (BI.ZONE). · Vulnerabilities & Exploits

in "Every Frontier Model Tried to Cheat": UK Safety Institute Puts Numbers Behind the OpenAI–Hugging Face Incident