LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

2026-10-06T13:24:00Z•1de5225387f0e1a35ab182ce8c4fa73e214b06d349d72ebccb2e2e3ce2545a68
CVE-2026-21589CVE-2026-61500CVE-2026-63688CVE-2026-88779CVE-2026-96940active-exploitationai-securityatlassianbotnetcloud-securitycredential-theftcyber-espionagedata-breachgitlabkubernetesmalwaremicrosoft-exchangenetscalerphishingransomwarerealtekrejetto-hfssharepointsupply-chainthreat-intelligencevulnerabilityzero-day

What happened

The feed covers multiple October 2026 cybersecurity developments, including actively exploited zero-days, critical vulnerabilities, malware campaigns, ransomware activity, phishing, data exposure, AI-agent security risks, and security program news. Highest-priority items include a CVSS 10.0 Dell Container Storage Modules issue enabling unauthenticated administrative access and root on Kubernetes nodes; actively exploited NetScaler and Rejetto HFS flaws; critical Atlassian, GitLab, and Exchange vulnerabilities; and attacks using ClickFix, SharePoint flaws, and Realtek SDK weaknesses. The feed’s

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
1de5225387f0e1a35ab182ce8c4fa73e214b06d349d72ebccb2e2e3ce2545a68
Enrichment time
2026-10-06T13:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.