{"vulnerability": "cve-2026-6327", "sightings": [{"uuid": "d79be1bf-a627-4374-bfa8-9bd238c9ac74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63278", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mw4b3d2jjx2g", "content": "CVE-2026-63278 affects LibreOffice from The Document Foundation: crafted document links could expand environment variable or INI file values and exfiltrate that data to a remote server on open. Fixed in LibreOffice 26.2.5. No exploitation confirmed.", "creation_timestamp": "2026-09-22T12:46:50.062316Z"}, {"uuid": "441499a8-2f35-487b-8591-1bb5804994be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63272", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mw6ns4wp7w2h", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-63272\n\nLibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries i...", "creation_timestamp": "2026-09-23T11:39:39.368317Z"}]}