{"schema_version":1,"title":"Phpoffice PhpSpreadsheet vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Phpoffice PhpSpreadsheet: 0 in the last 7 days and 3 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-59932, was published on 28 July 2026.","url":"https://junglewise.ai/threats/technologies/phpspreadsheet","json_url":"https://junglewise.ai/threats/technologies/phpspreadsheet.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/phpspreadsheet","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":5,"all_time":9,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":9},"latest":[{"cve":"CVE-2026-59932","cvss":7.5,"epss":0.007,"slug":"cve-2026-59932-phpoffice-phpspreadsheet-denial-of-service-via-gnumeric-gzip","title":"PHPOffice PhpSpreadsheet denial of service via Gnumeric gzip expansion","severity":"high","exploited":false,"published_at":"2026-07-28T19:17:39.59+00:00","url":"https://junglewise.ai/threats/cve-2026-59932-phpoffice-phpspreadsheet-denial-of-service-via-gnumeric-gzip"},{"cve":"CVE-2026-59933","cvss":7.5,"epss":0.007,"slug":"cve-2026-59933-phpoffice-phpspreadsheet-denial-of-service-in-ole-reader","title":"PHPOffice PhpSpreadsheet denial of service in OLE reader","severity":"high","exploited":false,"published_at":"2026-07-28T18:17:23.033+00:00","url":"https://junglewise.ai/threats/cve-2026-59933-phpoffice-phpspreadsheet-denial-of-service-in-ole-reader"},{"cve":"CVE-2026-59931","cvss":7.7,"epss":0.0053,"slug":"cve-2026-59931-phpoffice-phpspreadsheet-ssrf-bypass-in-webservice-domain","title":"PHPOffice PhpSpreadsheet SSRF bypass in WEBSERVICE domain whitelist","severity":"high","exploited":false,"published_at":"2026-07-28T18:17:22.873+00:00","url":"https://junglewise.ai/threats/cve-2026-59931-phpoffice-phpspreadsheet-ssrf-bypass-in-webservice-domain"},{"cve":"CVE-2026-45034","cvss":4,"epss":0.0046,"slug":"cve-2026-45034-phpoffice-phpspreadsheet-security-bypass-in-file-prohibitwrappers","title":"PHPOffice PhpSpreadsheet security bypass in File::prohibitWrappers","severity":"critical","exploited":false,"published_at":"2026-06-22T21:16:24.403+00:00","url":"https://junglewise.ai/threats/cve-2026-45034-phpoffice-phpspreadsheet-security-bypass-in-file-prohibitwrappers"},{"cve":"CVE-2026-40902","cvss":7.5,"epss":0.0049,"slug":"cve-2026-40902-phpoffice-phpspreadsheet-cpu-denial-of-service-in-xlsx-reader","title":"PHPOffice PhpSpreadsheet CPU denial of service in XLSX reader","severity":"high","exploited":false,"published_at":"2026-05-12T22:16:33.923+00:00","url":"https://junglewise.ai/threats/cve-2026-40902-phpoffice-phpspreadsheet-cpu-denial-of-service-in-xlsx-reader"},{"cve":"CVE-2026-40863","cvss":7.5,"epss":0.0049,"slug":"cve-2026-40863-phpspreadsheet-has-cpu-denial-of-service-via-unbounded-row-index","title":"PHPOffice PhpSpreadsheet denial of service in SpreadsheetML XML reader","severity":"high","exploited":false,"published_at":"2026-05-12T22:16:33.783+00:00","url":"https://junglewise.ai/threats/cve-2026-40863-phpspreadsheet-has-cpu-denial-of-service-via-unbounded-row-index"},{"cve":"CVE-2026-40296","cvss":5.4,"epss":0.0025,"slug":"cve-2026-40296-phpoffice-phpspreadsheet-xss-in-html-writer-via-number-format","title":"PHPOffice PhpSpreadsheet XSS in HTML writer via number format bypass","severity":"medium","exploited":false,"published_at":"2026-05-06T22:16:25.51+00:00","url":"https://junglewise.ai/threats/cve-2026-40296-phpoffice-phpspreadsheet-xss-in-html-writer-via-number-format"},{"cve":"CVE-2026-35453","cvss":5.4,"epss":0.0024,"slug":"cve-2026-35453-phpoffice-phpspreadsheet-xss-in-html-writer-via-numberformat","title":"PHPOffice PhpSpreadsheet XSS in HTML Writer via NumberFormat","severity":"medium","exploited":false,"published_at":"2026-05-05T20:16:38.367+00:00","url":"https://junglewise.ai/threats/cve-2026-35453-phpoffice-phpspreadsheet-xss-in-html-writer-via-numberformat"},{"cve":"CVE-2026-34084","cvss":9.8,"epss":0.0078,"slug":"cve-2026-34084-phpoffice-phpspreadsheet-rce-and-ssrf-via-php-stream-wrappers","title":"PHPOffice PhpSpreadsheet RCE and SSRF via PHP Stream Wrappers","severity":"critical","exploited":false,"published_at":"2026-05-05T20:16:37.007+00:00","url":"https://junglewise.ai/threats/cve-2026-34084-phpoffice-phpspreadsheet-rce-and-ssrf-via-php-stream-wrappers"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Phpoffice PhpSpreadsheet","slug":"phpspreadsheet","vendor":{"name":"Phpoffice","slug":"phpoffice","url":"https://junglewise.ai/threats/vendors/phpoffice"},"aliases":[],"category":"library","homepage":"https://phpspreadsheet.readthedocs.io/","repo_url":"https://github.com/PHPOffice/PhpSpreadsheet","description":"A pure PHP library for reading and writing spreadsheet files.","url":"https://junglewise.ai/threats/technologies/phpspreadsheet"},"most_severe":[{"cve":"CVE-2026-34084","cvss":9.8,"epss":0.0078,"slug":"cve-2026-34084-phpoffice-phpspreadsheet-rce-and-ssrf-via-php-stream-wrappers","title":"PHPOffice PhpSpreadsheet RCE and SSRF via PHP Stream Wrappers","severity":"critical","exploited":false,"published_at":"2026-05-05T20:16:37.007+00:00","url":"https://junglewise.ai/threats/cve-2026-34084-phpoffice-phpspreadsheet-rce-and-ssrf-via-php-stream-wrappers"},{"cve":"CVE-2026-45034","cvss":4,"epss":0.0046,"slug":"cve-2026-45034-phpoffice-phpspreadsheet-security-bypass-in-file-prohibitwrappers","title":"PHPOffice PhpSpreadsheet security bypass in File::prohibitWrappers","severity":"critical","exploited":false,"published_at":"2026-06-22T21:16:24.403+00:00","url":"https://junglewise.ai/threats/cve-2026-45034-phpoffice-phpspreadsheet-security-bypass-in-file-prohibitwrappers"},{"cve":"CVE-2026-59931","cvss":7.7,"epss":0.0053,"slug":"cve-2026-59931-phpoffice-phpspreadsheet-ssrf-bypass-in-webservice-domain","title":"PHPOffice PhpSpreadsheet SSRF bypass in WEBSERVICE domain whitelist","severity":"high","exploited":false,"published_at":"2026-07-28T18:17:22.873+00:00","url":"https://junglewise.ai/threats/cve-2026-59931-phpoffice-phpspreadsheet-ssrf-bypass-in-webservice-domain"},{"cve":"CVE-2026-59932","cvss":7.5,"epss":0.007,"slug":"cve-2026-59932-phpoffice-phpspreadsheet-denial-of-service-via-gnumeric-gzip","title":"PHPOffice PhpSpreadsheet denial of service via Gnumeric gzip expansion","severity":"high","exploited":false,"published_at":"2026-07-28T19:17:39.59+00:00","url":"https://junglewise.ai/threats/cve-2026-59932-phpoffice-phpspreadsheet-denial-of-service-via-gnumeric-gzip"},{"cve":"CVE-2026-59933","cvss":7.5,"epss":0.007,"slug":"cve-2026-59933-phpoffice-phpspreadsheet-denial-of-service-in-ole-reader","title":"PHPOffice PhpSpreadsheet denial of service in OLE reader","severity":"high","exploited":false,"published_at":"2026-07-28T18:17:23.033+00:00","url":"https://junglewise.ai/threats/cve-2026-59933-phpoffice-phpspreadsheet-denial-of-service-in-ole-reader"},{"cve":"CVE-2026-40902","cvss":7.5,"epss":0.0049,"slug":"cve-2026-40902-phpoffice-phpspreadsheet-cpu-denial-of-service-in-xlsx-reader","title":"PHPOffice PhpSpreadsheet CPU denial of service in XLSX reader","severity":"high","exploited":false,"published_at":"2026-05-12T22:16:33.923+00:00","url":"https://junglewise.ai/threats/cve-2026-40902-phpoffice-phpspreadsheet-cpu-denial-of-service-in-xlsx-reader"},{"cve":"CVE-2026-40863","cvss":7.5,"epss":0.0049,"slug":"cve-2026-40863-phpspreadsheet-has-cpu-denial-of-service-via-unbounded-row-index","title":"PHPOffice PhpSpreadsheet denial of service in SpreadsheetML XML reader","severity":"high","exploited":false,"published_at":"2026-05-12T22:16:33.783+00:00","url":"https://junglewise.ai/threats/cve-2026-40863-phpspreadsheet-has-cpu-denial-of-service-via-unbounded-row-index"},{"cve":"CVE-2026-40296","cvss":5.4,"epss":0.0025,"slug":"cve-2026-40296-phpoffice-phpspreadsheet-xss-in-html-writer-via-number-format","title":"PHPOffice PhpSpreadsheet XSS in HTML writer via number format bypass","severity":"medium","exploited":false,"published_at":"2026-05-06T22:16:25.51+00:00","url":"https://junglewise.ai/threats/cve-2026-40296-phpoffice-phpspreadsheet-xss-in-html-writer-via-number-format"},{"cve":"CVE-2026-35453","cvss":5.4,"epss":0.0024,"slug":"cve-2026-35453-phpoffice-phpspreadsheet-xss-in-html-writer-via-numberformat","title":"PHPOffice PhpSpreadsheet XSS in HTML Writer via NumberFormat","severity":"medium","exploited":false,"published_at":"2026-05-05T20:16:38.367+00:00","url":"https://junglewise.ai/threats/cve-2026-35453-phpoffice-phpspreadsheet-xss-in-html-writer-via-numberformat"}],"generated_at":"2026-09-26T20:07:00.238639+00:00"}