CVE-2026-12862Disclosure

LOWCVSS 5.1 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the user loading the file or other data in the file.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://github.com/venueless/venueless/security/advisories/GHSA-5hw3-655h-7m86

Weakness type (CWE)

CWE-148

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud90d
Disclosure
🚨*CVE* CVE-2026-12862 Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the use… https://www.cve.org/CVERecord?id=CVE-2026-12862 ----- Traducción: CVE-2026-12862 Se … http://infoflow.cloud`
Post summary
The post announces CVE-2026-12862, describing a formula injection flaw in Excel exports that could compromise the environment, and links to the official CVE record.
0000029
88 followersView on X
CVE@CVEnew90d
Disclosure
CVE-2026-12862 Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of the use… https://www.cve.org/CVERecord?id=CVE-2026-12862
Post summary
The post discloses a formula injection flaw in Excel exports that could allow an attacker to compromise the environment; no exploitation, patch, or PoC is referenced.
00000756
57.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-12862 Formula Injection in Excel Exports via Untrusted User Data https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12862 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces CVE‑2026‑12862, describing a formula‑injection flaw in Excel exports due to untrusted user data, and provides links to vulnerability details and a notification, with no evidence of exploitation, PoC, or patch availability.
00000119
4.1K followersView on X

Explore more

Back to dashboard