en
The Document Foundation is a German nonprofit foundation that supports and represents the LibreOffice project. It develops and fosters free and open-source office-productivity software and document-format liberation tools, emphasizing open standards, community governance, and user control of created documents.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/17/2026, The Document Foundation recorded 13 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, LibreOffice had the most security vulnerabilities in the The Document Foundation ecosystem, with 13 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CVE-2026-63270Environment/ini-file leaksCVE-2026-63269LFI and GET SSRF via GStreamer and HLS playlistsCVE-2026-63268LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db hrefCVE-2026-63267LFI and GET SSRF via calcext:data-mappings and csv providerCVE-2026-63266Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality48 Results | Page 1 of 5
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |