DeutschShown in its original language — a full translation is planned for a future version.
IBM App Connect Enterprise (fast-xml-parser): Mehrere Schwachstellen
view advisory published 2026-03-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder Sicherheitsmaßnahmen zu umgehen, wodurch Cross-Site-Scripting-Angriffe ermöglicht werden.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-25896US | — | — | ||
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (.… | ||||
| CVE-2026-26278US | — | — | ||
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, th… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-0772 - CSAF Versionself
- WID-SEC-2026-0772 - Portal Versionself
- IBM Security Bulletin vom 2026-03-17external
- IBM Security Bulletin 7267856 vom 2026-03-27external
- IBM Security Bulletin 7268165 vom 2026-03-31external
- IBM Security Bulletin 7268736 vom 2026-04-07external
- IBM Security Bulletin 7273772 vom 2026-05-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan