Linux Distros Unpatched Vulnerability : CVE-2026-95369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v...

CVE-2026-18172

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-17646

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-18172

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a remote attack where an adversary could obtain sensitive information. The root cause is the improper restriction of XML external entity references (CWE-611). Affected versions include 4.0.6.0 through 4.0.10.0 (specific...

CVE-2026-18172 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-18172 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-93990

A flaw was found in Expat. This vulnerability allows a remote attacker to send specially crafted UTF-16 encoded XML data. Due to improper validation of surrogate characters, the parser can be tricked into accepting malformed sequences, which can hide legitimate markup characters. This could enabl...

CVE-2026-17646 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-17646 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XML external entity references...

CVE-2026-17646

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability involving the improper restriction of XML external entity references . This flaw could allow a remote authenticated attacker to obtain sensitive information . No specific patch versions or exploit details ...

CVE-2026-61570

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS column of a Merlin project SQLite database, leaving doctype...

EUVD-2026-84820

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS column of a Merlin project SQLite database, leaving doctype...

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

Summary dasel's JSON and XML readers parse nested structures with unbounded recursion, one native stack frame per nesting level, with no depth guard. A small sub-10 MB, deeply nested document drives the Go runtime past its goroutine stack limit and triggers a fatal error: stack overflow. This is...

GHSA-CQXR-JXR2-85PQ Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS

Summary dasel's JSON and XML readers parse nested structures with unbounded recursion, one native stack frame per nesting level, with no depth guard. A small sub-10 MB, deeply nested document drives the Go runtime past its goroutine stack limit and triggers a fatal error: stack overflow. This is...

EUVD-2026-84017

Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

CVE-2026-65124

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

CVE-2026-65124

The NVIDIA Infrastructure Controller for Linux is vulnerable to an XML injection (specifically identified as Blind XPath Injection ) in versions 0 to 1.9 . An attacker could exploit this vulnerability to cause data tampering and denial of service . To remediate this issue, users should update the...

CVE-2026-65124

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service...