Description
A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload.
Critical · 9.8
CVE-2026-88405
EUVD-2026-84201GHSA-c4rf-xpw9-chfc
A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of …
Published Sep 21, 2026 · Updated Sep 24, 2026 · Assigned by mitre