CVE-2026-88404 | Univer 1.0.0-alpha.2 UniscriptExecutionService script-execution.service.ts UniscriptExecutionService.execute code injection

A vulnerability, which was classified as critical, has been found in Univer 1.0.0-alpha.2. The impacted element is the function UniscriptExecutionService.execute of the file /services/script-execution.service.ts of the component UniscriptExecutionService. This manipulation causes code injection.

This vulnerability appears as CVE-2026-88404. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More