CVE-2026-15274
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability was found in the fbxcel library up to version 0.9.0 in the Node Header Handler component. Manipulation of data in the parser.rs file leads to a denial of service (DoS). The attack requires local access and the exploit is publicly available.
Risk Assessment
The organization is at risk of service disruption in applications using fbxcel, potentially causing downtime and loss of productivity. The public exploit increases the likelihood of exploitation.
Recommendation
Immediately update the fbxcel library to a version above 0.9.0 once the fix is released. Until then, restrict local access to systems using this library.
Original NVD description (English source)
A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part of the file src/pull_parser/v7400/parser.rs of the component Node Header Handler. The manipulation results in denial of service. The attack must be initiated from a local position. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.