Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsx_consumer::read_office_document of the file source/detail/serialization/xlsx_consumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. The attack must be carried out locally. The exploit is publicly available and might be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3665 A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsx_consumer::read_office_document of the file so… https://www.cve.org/CVERecord?id=CVE-2026-3665
Post summary
The post announces vulnerability CVE-2026-3665 affecting xlnt-community xlnt ≤1.6.1, specifying the vulnerable function but offering no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-3665 Local Null Pointer Dereference Vulnerability in xlnt-community xlnt up to 1.6.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3665
Post summary
The text discloses a local null pointer dereference vulnerability in xlnt-community's xlnt library (up to v1.6.1) identified as CVE-2026-3665, without additional information on patches, exploitation, or PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | xlnt-community | xlnt | - | - | - |