https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T03:14:08.213386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-63268 CVE-2026-63268 — LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href 2026-10-10T03:14:08.231468+00:00

Affected: The Document Foundation LibreOffice

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml data providers are restored when a document is loaded.