The vulnerability identified as CVE-2026-5242 in MIA Technology Inc.'s Pizzy Library is due to improper neutralization of formula elements in CSV files. This weakness allows an attacker to inject code via specially crafted CSV content. The affected versions include 1.0.0.26250 and versions prior to 1.3.9.26250. The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, requiring low privileges but no user interaction, and resulting in high confidentiality, integrity, and availability impacts. No official patch or remediation level has been provided at this time, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code through crafted CSV files, potentially compromising the confidentiality, integrity, and availability of the affected system. Given the high CVSS score, the impact is significant if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when processing CSV files from untrusted sources to mitigate potential exploitation.