CVE-2026-71497 is a medium severity security vulnerability affecting the wso2mi package, which uses the jsoup Java library for processing HTML. The vulnerability impacts versions prior to 4.3.0-r0, 4.4.0-r0, and 4.5.0-r0. It has a CVSS score of 4.7 with network attack vector, high attack complexity, no privileges required, and requires user interaction. The vulnerability results in limited confidentiality and integrity impact but no availability impact. Fixed versions are available.