CRITICAL
9.8 CVE-2026-88404 Published 21 Sept 2026
Univer Script Execution Service RCE Vulnerability
Worried this affects your website?
A remote code execution vulnerability has been identified in Univer's UniscriptExecutionService.execute() function (/services/script-execution.service.ts).
Attackers can exploit this issue in Univer v1.0.0-alpha.2 to execute arbitrary code via a crafted payload.
Reference: CVE-2026-88404 on NVD
← Back to Security News