CVE-2026-88404

CriticalCVSS 9.8

Published: 21/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 22/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

47th percentile - higher than 47% of all known CVEs

Summary

Remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function in Univer v1.0.0-alpha.2. Attackers can execute arbitrary code via a crafted payload.

Risk Assessment

Potential for full system compromise and execution of malicious operations.

Recommendation

Update Univer to a patched version or restrict access to the script service.

Other vulnerabilities in Univer

CVE-2026-88405Critical
Remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function in Univer v1.0.0-alpha.2. Attackers can execute arbitrary code via a crafted payload.

Original NVD description (English source)

A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS