VulnSocial

CVE-2026-53964Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-20); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-20: 1Mentions · 2026-10-03: 1Technical Details · 2026-08-20: 108-2010-03
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse2 posts
  • DFIR Lab@DFIR_Lab

    🚨 HIGH severity CVE-2026-53964 (CVSS 7.2): RCE via SSTI in Document Merge Service affects XLSX templates. Attackers can execute code in server context. Patch to v9.1.0 immediately. #CVE #Vulnerability #PatchNow https://t.co/rL1XUYIwTH

    0000039
    142 followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 Document Merge Service, Server-Side Template Injection (SSTI) RCE, #CVE-2026-53964 (High Severity) -DC-Aug2026-1663 https://dailycve.com/document-merge-service-server-side-template-injection-ssti-rce-cve-2026-53964-high-severity-dc-aug2026-1663/

    Post summary

    The post announces a new high‑severity Server‑Side Template Injection vulnerability (CVE-2026-53964) in Document Merge Service, providing basic technical details but no exploit code, active use, or remediation information.

    0000023
    229 followersView on X

Explore more

Back to dashboard