CVE-2026-59263

A manipulated document opened in Apache OpenOffice 4.1.16 or earlier may allow substituted content to be displayed manipulating the user. Such documents are corrupt and should not be opened. Users are recommended to upgrade to version 4.1.17, which fixes this issue.

• CWE-349

• https://lists.apache.org/thread.html/drr0ss9wrkq0omlrwjhcm8738pjx3xgdMailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/11/03/21Mailing List, Third Party Advisory

Published

Nov 4, 2026

Last Modified

Nov 4, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59258immich before 3.0.3 contains a broken access control vulnera…8.3
• CVE-2026-59259n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a …6.5
• CVE-2026-5926IBM Verify Identity Access Container 11.0 through 11.0.2 and…6.5
• CVE-2026-59260OpenWrt luci-app-samba4 read ACL grants file.exec permission…8.8
• CVE-2026-59261OpenClaw before 2026.5.28 contains a credential exposure vul…6.5
• CVE-2026-59262AFFiNE's histories GraphQL field fails to validate Doc.Read …6.5
• CVE-2026-59264The Windows installers of Apache OpenOffice 4.1.16 and earli…7.8
• CVE-2026-59265A code execution issue in the Java integration in Apache Ope…8.8
• CVE-2026-59267A crafted DXF document causes a heap buffer overflow in Draw…7.8
• CVE-2026-59268An out-of-bounds Write vulnerability in Apache OpenOffice ve…7.3
• CVE-2026-59269A user authenticating to Kubernetes clusters via the Pinnipe…3.8
• CVE-2026-59270Spring Security's embedded UnboundID LDAP server (UnboundIdC…9.1