CVE-2026-88404

CVE-2026-88404 is a remote code execution (RCE) vulnerability in Univer v1.0.0-alpha.2 , specifically in the UniscriptExecutionService.execute() function located in /services/script-execution.service.ts. An attacker can execute arbitrary code by supplying a crafted payload to this function. The a...