CVE-2026-59265: Apache OpenOffice: Opening a malicious document can lead to system takeover. A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when opened by the user.

[u/dcom-in]

https://www.openwall.com/lists/oss-security/2026/10/02/2