https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:40:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357526 EUVD-2026-357526 https://cve.radiocsirt.org/vuln/euvd-2026-357526 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19501 <p>CSV export functionality in Brainstorm Force SureForms version, &lt;= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator&#39;s workstation when the exported CSV file is opened in a vulnerable spreadsheet application.</p> <p>CSV export functionality in Brainstorm Force SureForms version, &lt;= 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator&#39;s workstation when the exported CSV file is opened in a vulnerable spreadsheet application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-19501 https://cve.radiocsirt.org/vuln/ghsa-fwh8-67c4-8cgg <p>CSV export functionality in Brainstorm Force SureForms version, &lt;= 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator&#39;s workstation when the exported CSV file is opened in a vulnerable spreadsheet application.</p> <p>CSV export functionality in Brainstorm Force SureForms version, &lt;= 2.1.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator&#39;s workstation when the exported CSV file is opened in a vulnerable spreadsheet application.</p> https://cve.radiocsirt.org/vuln/ghsa-fwh8-67c4-8cgg