UNKNOWN NVD

CVE-2026-88404

A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) of Univer v1.0.0-alpha.2

A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload.

References

https://github.com/czx1111/cve/issues/8

Published: 2026-09-21 · Source: NVD · Feed updated: 2026-09-21

This unknown severity vulnerability was published on 2026-09-21 via NVD.

vulnfeed aggregates 14328 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.