CVE-2026-88405
🔶 mediumSummary
A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload.
CVSS Score
-
EPSS Score
0.2
Exploit Probability
Published Date
2026-09-21
First Seen: 2026-09-24
Last Modified
2026-09-22
Source
NVD 🔗