CVE-2026-63277 - RCE via calcext:data-mappings, sql provider and jdbc connector
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in a Java class path has to be a file URL.
نُشر: Oct 05, 2026 12:17
آخر تعديل: Oct 06, 2026 15:03
