Formula Injection Vulnerability in Venueless Application

CVE-2026-12862

What is CVE-2026-12862?

A vulnerability exists in the Venueless application where untrusted user data is transferred directly into Excel export files for administrators. This flaw allows for formula injection attacks, enabling malicious users to compromise the environment of anyone who opens the exported file. Consequently, this jeopardizes sensitive data and organizational security, highlighting the need for stringent data validation mechanisms to prevent exploitation.

References