A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload.
CVE-2026-88405
NONE
EPSS 0.21%
Updated Sep 22, 2026
Payload
CVE Details
CVE ID
CVE-2026-88405
Published Date
Sep 22, 2026
Vendor
Payload
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.21%
Likelihood of exploitation in next 30 days
Percentile:
11.3th percentile (higher than 11.3% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory