Search: CVE-2026-86144

1 threat

Search: CVE-2026-86144
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.6	EPSS 0.2%	CVE-2026-86144libxml2 · Incorrect Resource Transfer Between Spheres Medium5.6EPSS 0.2%2026-09-05CVE Database V5CVE-2026-86144 CVE-2026-86144 is a vulnerability in libxml2's xinclude functionality before version 2.15.4 where certain parsing flags, such as XML_PARSE_NONET, are not propagated during processing. This can lead to security issues including XML external entity injection, server-side request forgery (SSRF), or denial of service if a custom resource loader accesses attacker-controlled internet resources. EPSS 0.2%Vulnerability xmlsoft #cwe-669 #ghsa-h6w8-m27h-f268	CVE Database V5	2026-09-05

Showing 1–1 of 1 result