CVE-2026-107225 | qax-os excelize up to 2.11.0 Style Extraction styles.xml GetStyle fillId/borderId/fontId input validation

October 7, 2026 Yanac

A vulnerability described as problematic has been identified in qax-os excelize up to 2.11.0. Affected by this vulnerability is the function GetStyle of the file styles.xml of the component Style Extraction. The manipulation of the argument fillId/borderId/fontId results in improper input validation.

This vulnerability is known as CVE-2026-107225. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More