CVE-2026-115748

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP Jabber server library. Its XEP-0077 In-Band Registration implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is...

CVE-2026-115721

UNSUPPORTED WHEN ASSIGNED Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP Jabber server library. As this project is retired, we do not plan to release a version...

CVE-2026-115748

Apache Vysper, an XMPP (Jabber) server library, is vulnerable to an authorization bypass in all versions. The issue stems from the XEP-0077 (In-Band Registration) implementation, which lacks a necessary authentication check. This allows any authenticated user to compromise other accounts . Becaus...

CVE-2026-115748 Apache Vysper: Authorization bypass

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP Jabber server library. Its XEP-0077 In-Band Registration implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is...

EUVD-2026-109916

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP Jabber server library. Its XEP-0077 In-Band Registration implementation is missing an authentication check, allowing any authenticated user to compromise other accounts. As this project is...

CVE-2026-115721

All versions of the Apache Vysper XMPP server library are affected by an unauthenticated remote denial-of-service (DoS) vulnerability. The root cause is an unbounded XML buffer in the nbxml parser ; specifically, the XMLTokenizer accumulates bytes into an auto-expanding buffer without a maximum s...

EUVD-2026-109915

UNSUPPORTED WHEN ASSIGNED Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of Apache Vysper. Apache Vysper is an XMPP Jabber server library. As this project is retired, we do not plan to release a version...