CVE-2026-59932 in PhpSpreadsheet

Prediction

by VulDB Data Team • 07/26/2026

A vulnerability was determined in PHPOffice PhpSpreadsheet. This affects an unknown function of the component Gzip Handler. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. It is recommended to upgrade the affected component.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Moderation: accepted
• Entry: VDB-383348
• CPE: ready
• CWE: CWE-789 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: medium

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-59932
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-59932
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-59932/