RHEL 9 : xmlrpc-c (RHSA-2026:61316)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61316 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

RHEL 7 : xmlrpc-c (RHSA-2026:61234)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61234 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

RHEL 9 : xmlrpc-c (RHSA-2026:61231)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61231 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

openSUSE 16: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (openSUSE-SU-2026:21633-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21633-1 advisory. This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component...

Security update for xmlrpc-c (moderate)

openSUSE security update: security update for xmlrpc-c ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21633-1 Rating: moderate References: bsc1272769 Cross-References: CVE-2026-15928 CVSS scores: CVE-2026-15928 SUSE : 5.4...

SUSE-SU-2026:23311-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

OPENSUSE-SU-2026:21633-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xmlrpc-c (UTSA-2026-102697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102697 advisory. XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component. Tenable has extracte...

OESA-2026-3426 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...

OESA-2026-3387 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...

OESA-2026-3386 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...

OESA-2026-3385 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...

OESA-2026-3384 xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected...

SUSE SLED15: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (SUSE-SU-2026:3572-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3572-1 advisory. This update for xmlrpc-c fixes the following issue: - CVE-2026-15928: reflected cross-site scripting XSS via HTML...

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue: CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:3572-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue: - CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769...

CVE-2026-15928

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

EEF-CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Summary Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in...

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

PT-2026-67486

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.format reason/4 and Oaskit.ErrorHandler.Default.reason to html/1 in lib/oaskit/error handler/default.ex...