PT-2026-34232

🗓️ 25 Mar 2026 00:00:00Reported by Positive TechnologiesType

Untrusted XML can read local files with default parsers; lxml 6.1.0 defaults to internal entity resolution.

Reporter	Title	Published	Views	Family All 264
IBM Security Bulletins	Security Bulletin:lxml Local File Access Vulnerability: Fixed in 6.1.0	4 Aug 202609:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by an XML external entity (XXE) vulnerability due to lxml	8 Jul 202609:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses lxml-6.0.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-41066	1 Jun 202607:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in lxml bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	13 Jul 202621:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	17 Jul 202608:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540)	21 Sep 202607:07	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Jun 202608:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images	18 May 202616:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of integrity, arbitrary code execution, denial of service and SSRF	6 May 202613:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in lxml (CVE-2026-41066)	31 May 202616:48	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-44307
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44307
osv	www.osv.dev/vulnerability/CLEANSTART-2026-KE11953
osv	www.osv.dev/vulnerability/CVE-2024-56326
osv	www.osv.dev/vulnerability/CVE-2025-69223
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-56326
osv	www.osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2026-41066
osv	www.osv.dev/vulnerability/CLEANSTART-2026-AN24336
reddit	www.reddit.com/r/VulnMatter/comments/1ssnpas/resumen_diario_de_vulnerabilidades_22042026
osv	www.osv.dev/vulnerability/ghsa-r6ph-v2qm-q3c2

18 Sep 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 27.8

CVSS 3.17.5

EPSS0.00418

SSVC