https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T14:03:41.496781+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-63277 BELL-CVE-2026-63277 2026-10-12T14:03:41.566527+00:00

Affected: Alpaquita:23: libreoffice-headless, Alpaquita:25: libreoffice-headless, Alpaquita:stream: libreoffice-headless

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1260 certfr-2026-avi-1260 — De multiples vulnérabilités ont été découvertes dans OpenOffice. Elles permettent à un attaquant de provoquer une exécu… 2026-10-12T14:03:41.566578+00:00 certfr-2026-avi-1260 https://cve.radiocsirt.org/vuln/euvd-2026-382810 EUVD-2026-382810 2026-10-12T14:03:41.566599+00:00 EUVD-2026-382810 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63277 fkie_cve-2026-63277 2026-10-12T14:03:41.566611+00:00

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in a Java class path has to be a file URL.

 https://cve.radiocsirt.org/vuln/ghsa-5jx8-5g92-5w59 GHSA-5jx8-5g92-5w59 2026-10-12T14:03:41.566635+00:00

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in a Java class path has to be a file URL.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63277 UBUNTU-CVE-2026-63277 2026-10-12T14:03:41.566651+00:00

Affected: Ubuntu:20.04:LTS: libreoffice, Ubuntu:22.04:LTS: libreoffice, Ubuntu:24.04:LTS: libreoffice, Ubuntu:26.04:LTS: libreoffice

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in a Java class path has to be a file URL.