CVE-2026-102495 in XmlSchema

Riassunto

di MITRE • 29/09/2026

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Apache
• Prenotare: 29/09/2026
• Divulgazione: 29/09/2026
• Moderazione: accettato
• Voce: VDB-411294
• CPE: pronto
• CWE: CWE-121 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102495
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102495
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102495/