CVE-2026-45186

Katalog CVE

CVSS 7.5 · High EPSS 0,48%

Kerentanan Inefficient Algorithmic Complexity pada libexpat project libexpat. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Rincian

Terbit di NVD

10 Mei 2026

Terakhir diubah

16 September 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-407: Inefficient Algorithmic Complexity

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/libexpat/libexpat/pull/1216 exploit · issue tracking · patch
• http://www.openwall.com/lists/oss-security/2026/05/11/16 mailing list · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2026:22715
• https://access.redhat.com/errata/RHSA-2026:22721
• https://access.redhat.com/errata/RHSA-2026:23230
• https://access.redhat.com/errata/RHSA-2026:26319
• https://access.redhat.com/errata/RHSA-2026:27201
• https://access.redhat.com/errata/RHSA-2026:29197
• https://access.redhat.com/errata/RHSA-2026:58981
• https://access.redhat.com/security/cve/CVE-2026-45186
• https://bugzilla.redhat.com/show_bug.cgi?id=2468575
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45186.json