{"uuid": "d79be1bf-a627-4374-bfa8-9bd238c9ac74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63278", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mw4b3d2jjx2g", "content": "CVE-2026-63278 affects LibreOffice from The Document Foundation: crafted document links could expand environment variable or INI file values and exfiltrate that data to a remote server on open. Fixed in LibreOffice 26.2.5. No exploitation confirmed.", "creation_timestamp": "2026-09-22T12:46:50.062316Z"}