CVE-2026-15928

EUVD-2026-49062
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 20.71%
Debian logo
Debian Releases
Debian Product
Codename
xmlrpc-c
bookworm
postponed
forky
vulnerable
sid
vulnerable
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
xmlrpc-c
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libxmlrpc3
suse enterprise desktop 15 SP7
1.51.07-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.51.07-150400.3.3.1
fixed
suse enterprise server 15 SP4
1.51.07-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.51.07-150400.3.3.1
fixed
libxmlrpc_client3
suse enterprise desktop 15 SP7
1.51.07-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.51.07-150400.3.3.1
fixed
suse enterprise server 15 SP4
1.51.07-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.51.07-150400.3.3.1
fixed
libxmlrpc_util4
suse enterprise desktop 15 SP7
1.51.07-150400.3.3.1
fixed
suse enterprise sap 15 SP7
1.51.07-150400.3.3.1
fixed
suse enterprise server 15 SP4
1.51.07-150400.3.3.1
fixed
suse enterprise server 15 SP7
1.51.07-150400.3.3.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
xmlrpc-c
RHEL 8.4 AUS
0:1.51.0-5.el8_4.3
fixed
RHEL 8.8 TUS
0:1.51.0-8.el8_8.2
fixed
xmlrpc-c-client
RHEL 8.4 AUS
0:1.51.0-5.el8_4.3
fixed
RHEL 8.8 TUS
0:1.51.0-8.el8_8.2
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://www.themissinglink.com.au/security-advisories/cve-2026-15928
https://xmlrpc-c.sourceforge.io/