CVE-2026-115943
— UNSCOREDPublished 2026-10-29 · Updated 2026-10-30
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as [>100], ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the workbook, and the eval runs while Spreadsheet::XLSX->new parses it. An attacker who supplies an XLSX file can run arbitrary Perl code.
Weaknesses
CWE-95
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2024-42002PoC
- CRITICALCVE-2025-53837PoC
- CRITICALCVE-2026-100741
- HIGHCVE-2026-100840PoC
- HIGHCVE-2026-100842PoC
- MEDIUMCVE-2026-101861PoC
- MEDIUMCVE-2026-105315PoC
- CRITICALCVE-2026-108263PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.