CVE-2026-61586 in Copernik XML Factory信息

预测

由 VulDB Data Team • 2026-10-02

检测到<a href="/zh/product/copernik_xml_factory">Copernik XML Factory 直到 0.1.1</a>存在漏洞。受影响的是函数<code>XmlFactories.newDocumentBuilderFactory/XmlFactories.newSAXParserFactory/XmlFactories.harden</code>，组件<em>XInclude</em>。在被操纵的情况下，会引发权限提升。远程可以启动攻击，通过升级至 0.1.2 版本可以消除此问题。建议将受影响的组件升级。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

管理

已接受

条目

VDB-413214

CPE

CWE

CWE-918 (已确认)

CVSS

5.3 (VulDB)

EPSS

0.00000

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-61586
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-61586
CVE Details	https://www.cvedetails.com/cve/CVE-2026-61586/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!