CVE-2026-5242: Security Advisory

CVE: CVE-2026-5242 CVSS 8.8

CVE-2026-5242 is a high-severity vulnerability (CVSS 8.8).

Summary

Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection.

This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250.

Remediation

Apply the vendor’s update during your next patch window and verify exposure. Patch-management tools that can deploy and verify the fix include Action1, Automox, ManageEngine Patch Manager Plus, ManageEngine Endpoint Central. See our best patch management ranking.

Sources

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0383

Data as of June 16, 2026. Sources: nvd.nist.gov, siberguvenlik.gov.tr. Figures are pulled from public vendor and security data and refreshed automatically.