CVE-2026-88405

CriticalCVSS 9.8

Published: 21/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 22/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

16th percentile - higher than 16% of all known CVEs

Summary

Remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function in Univer v1.0.0-alpha.2. Attackers can execute arbitrary code via a crafted payload.

Risk Assessment

Risk of server compromise and breach of data confidentiality and integrity.

Recommendation

Apply available patches or update Univer to a fixed version. Restrict access to sensitive functions.

Other vulnerabilities in Univer

CVE-2026-88404Critical
Remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function in Univer v1.0.0-alpha.2. Attackers can execute arbitrary code via a crafted payload.

Original NVD description (English source)

A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS