EIP-2026-103854

This exploit leverages the Apache UNO API to achieve unauthenticated remote code execution (RCE) by connecting to a vulnerable LibreOffice/OpenOffice instance running the ServiceManager on an external interface. It uses the SystemShellExecute component to execute arbitrary commands (e.g., calc.exe).