CVE-2026-6732

highpriority · track · 30EPSS 0.006 · 50 %ileDEEUFRNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.63% (50th) EPSS

CVSS 7.5 · high

Is it mine?

44 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · cert_bund · cisa_csaf_ot

EPSS · scored 2026-10-27

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRTU500 series CMU Firmwarecisa_csaf_ot
Update to CMU Firmware version 13.9.1
MitigationRTU500 series CMU Firmwarecisa_csaf_ot
Follow general mitigation factors/workarounds

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · secalert@redhat.com USexploitability 2.8 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-843USCWE-843USCWE-843US

affected products (44)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
GraalVMall versionscert_bundDEcpe:/a:oracle:graalvm:21.0.12.1
GraalVMall versionscert_bundDEcpe:/a:oracle:graalvm:21.3.19.1.1
GraalVMall versionscert_bundDEcpe:/a:oracle:graalvm:17.0.20.1
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:21.0.12.1
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:25.0.4.1
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:11.0.32.1
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:27
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:8u503
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:8u503-perf
Java SEall versionscert_bundDEcpe:/a:oracle:java_se:17.0.20.1
JavaFXall versionscert_bundDEcpe:/a:oracle:javafx:21.0.12
JavaFXall versionscert_bundDEcpe:/a:oracle:javafx:25.0.4
JavaFXall versionscert_bundDEcpe:/a:oracle:javafx:27
Open Source OpenJDKall versionscert_bundDEcpe:/a:oracle:openjdk:-
Oracle Java SE 26.0.2all versionscert_bundDEcpe:/a:oracle:java_se:26.0.2
Amazon Corretto< 8.512.08.1cert_bundDE
Hitachi Energy RTU500 series CMU Firmware≤ vers:RTU500_series_CMU_Firmware/>=13.8.1|<=13.8.2cisa_csaf_otUS
Hitachi Energy RTU500 series CMU Firmware≤ vers:RTU500_series_CMU_Firmware/>=13.5.1|<=13.5.4cisa_csaf_otUS

showing 20 of 44

advisories (8)

Vendor and ecosystem advisories describing this.

NCSC-2026-0449Meerdere kwetsbaarheden verholpen in Oracle JavaNL2026-10-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Java.
WID-SEC-W-2026-1257libxml2: Schwachstelle ermöglicht Denial of ServiceDeutsch2026-04-23csaf · cert_bundDE
Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in libxml2 ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2026-3038Meinberg LANTIME: Mehrere SchwachstellenDeutsch2026-08-26csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Meinberg LANTIME ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
WID-SEC-W-2026-4079Oracle Java SE: Mehrere SchwachstellenDeutsch2026-10-20csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
ICSA-26-293-05Hitachi Energy RTU500 Product2026-09-01icsa · cisa_csaf_otUS
Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
CERTFR-2026-AVI-1350Multiples vulnérabilités dans Oracle Java SEFrançais2026-10-21vendor · certfrFR
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
CERTFR-2026-AVI-1390Multiples vulnérabilités dans Tenable Network MonitorFrançais2026-10-27vendor · certfrFR

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund cisa_csaf_ot ncsc_nl certfr NVD CVE.org MITRE

published 2026-04-23modified 2026-10-26

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan