https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-06T15:27:57.976305+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-63277 CVE-2026-63277 — RCE via calcext:data-mappings, sql provider and jdbc connector 2026-10-06T15:27:57.977224+00:00

Affected: The Document Foundation LibreOffice

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in a Java class path has to be a file URL.