CVE-2026-63267

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions external data links are updated under the same link update control as other links in a spreadsheet.

• CWE-200
• CWE-918

• https://www.libreoffice.org/about-us/security/advisories/cve-2026-63267

Published

Oct 5, 2026

Last Modified

Oct 6, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63261Uncontrolled Resource Consumption (CWE-400) in Kibana can le…6.5
• CVE-2026-63262Missing Authorization (CWE-862) in Kibana can lead to unauth…4.3
• CVE-2026-63263Uncontrolled Resource Consumption (CWE-400) in Elasticsearch…6.5
• CVE-2026-63264Joomla Extension - joomshopping.com - Reflective XSS in Joom…5.3
• CVE-2026-63265Joomla Extension - regularlabs.com - Inconsistent CSRF token…8
• CVE-2026-63266LibreOffice Calc can link a cell range to an external data s…6.8
• CVE-2026-63268LibreOffice Calc can link a cell range to an external data s…6.7
• CVE-2026-63269LibreOffice can link to audio and video files from a documen…6.7
• CVE-2026-6327IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized …4.3
• CVE-2026-63270URLs could be constructed which expanded environment variabl…6.7
• CVE-2026-63272LibreOffice can import WMF graphics, which may be embedded i…5.4
• CVE-2026-63273LibreOffice Draw can import PDF documents. A heap buffer ove…5.4