CVE-2026-32777 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 12.46%

Affected Products (NVD)

Vendor	Product	Version
libexpat_project	libexpat	𝑥 < 2.7.5

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).

Vendor	Product	Version	Source
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	V3.1.5 ≤ 𝑥 < V3.1.6	ADP
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	V3.1.5 ≤ 𝑥 < V3.1.6	ADP
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	V3.1.5 ≤ 𝑥 < V3.1.6	ADP

Debian Releases

Debian Product

Codename

expat

bookworm	vulnerable
bookworm (security)	2.5.0-1+deb12u5 fixed
bullseye	postponed
forky	2.9.0-1 fixed
sid	2.9.0-1 fixed
trixie	2.8.3-1~deb13u1 fixed
trixie (security)	2.9.0-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

expat

bionic	Fixed in 2.2.5-3ubuntu0.9+esm4 released
focal	Fixed in 2.2.9-1ubuntu0.8+esm2 released
jammy	Fixed in 2.4.7-1ubuntu0.8 released
noble	Fixed in 2.6.1-2ubuntu0.5 released
questing	ignored
resolute	Fixed in 2.7.4-1ubuntu0.1 released
stonking	not-affected
trusty	Fixed in 2.1.0-4ubuntu1.4+esm12 released
xenial	Fixed in 2.1.0-7ubuntu0.16.04.5+esm13 released

apache2

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
trusty	not-affected
xenial	not-affected

apr-util

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
trusty	not-affected
xenial	not-affected

cmake

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
xenial	not-affected

ghostscript

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
xenial	not-affected

texlive-bin

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
xenial	not-affected

xmlrpc-c

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
stonking	needs-triage
trusty	needs-triage
xenial	needs-triage

vnc4

bionic	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne
stonking	dne
trusty	needs-triage
xenial	needs-triage

wbxml2

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
stonking	needs-triage
xenial	needs-triage

swish-e

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
stonking	needs-triage
xenial	needs-triage

insighttoolkit4

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	dne
questing	dne
resolute	dne
stonking	dne
xenial	needs-triage

cadaver

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
stonking	needs-triage
xenial	needs-triage

gdcm

bionic	needs-triage
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
trusty	not-affected
xenial	needs-triage

ayttm

jammy	dne
noble	dne
questing	dne
resolute	dne
stonking	dne
xenial	needs-triage

cableswig

jammy	dne
noble	dne
questing	dne
resolute	dne
stonking	dne
xenial	needs-triage

coin3

bionic	needs-triage
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected
trusty	needs-triage
xenial	needs-triage

matanza

bionic	needs-triage
focal	ignored
jammy	ignored
noble	ignored
questing	ignored
resolute	ignored
stonking	ignored
xenial	needs-triage

tdom

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage
stonking	needs-triage
xenial	needs-triage

vtk

jammy	dne
noble	dne
questing	dne
resolute	dne
stonking	dne
trusty	needs-triage
xenial	needs-triage

smart

bionic	needs-triage
jammy	dne
noble	dne
questing	dne
resolute	dne
stonking	dne
xenial	needs-triage

firefox

jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected

thunderbird

jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
stonking	not-affected

libxmltok

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	dne
resolute	dne
stonking	dne
xenial	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

MozillaFirefox

suse enterprise desktop 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise sap 12 SP5	153.5.0-118.16.2 fixed
suse enterprise sap 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise server 12 SP5	153.5.0-118.16.2 fixed
suse enterprise server 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.157.16.1 fixed

MozillaFirefox-devel

suse enterprise desktop 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise sap 12 SP5	153.5.0-118.16.2 fixed
suse enterprise sap 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise server 12 SP5	153.5.0-118.16.2 fixed
suse enterprise server 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.157.16.1 fixed

MozillaFirefox-translations-common

suse enterprise desktop 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise sap 12 SP5	153.5.0-118.16.2 fixed
suse enterprise sap 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise server 12 SP5	153.5.0-118.16.2 fixed
suse enterprise server 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.157.16.1 fixed

MozillaFirefox-translations-other

suse enterprise desktop 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP4	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP5	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP6	153.5.0-150400.157.16.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.157.16.1 fixed

MozillaThunderbird

suse enterprise desktop 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise workstation 15 SP7	153.5.0-150400.13.9.1 fixed

MozillaThunderbird-translations-common

suse enterprise desktop 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise workstation 15 SP7	153.5.0-150400.13.9.1 fixed

MozillaThunderbird-translations-other

suse enterprise desktop 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise sap 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise server 15 SP7	153.5.0-150400.13.9.1 fixed
suse enterprise workstation 15 SP7	153.5.0-150400.13.9.1 fixed

expat

suse enterprise desktop 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise sap 12 SP5	2.8.5-21.55.1 fixed
suse enterprise sap 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise server 12 SP3	2.8.5-21.55.1 fixed
suse enterprise server 12 SP5	2.8.5-21.55.1 fixed
suse enterprise server 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP7	2.8.5-150700.3.15.1 fixed

libexpat-devel

suse enterprise desktop 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise sap 12 SP5	2.8.5-21.55.1 fixed
suse enterprise sap 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise server 12 SP5	2.8.5-21.55.1 fixed
suse enterprise server 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP7	2.8.5-150700.3.15.1 fixed

libexpat1

suse enterprise desktop 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise sap 12 SP5	2.8.5-21.55.1 fixed
suse enterprise sap 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise server 12 SP3	2.8.5-21.55.1 fixed
suse enterprise server 12 SP5	2.8.5-21.55.1 fixed
suse enterprise server 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP7	2.8.5-150700.3.15.1 fixed

libexpat1-32bit

suse enterprise desktop 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise sap 12 SP5	2.8.5-21.55.1 fixed
suse enterprise sap 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise sap 15 SP7	2.8.5-150700.3.15.1 fixed
suse enterprise server 12 SP3	2.8.5-21.55.1 fixed
suse enterprise server 12 SP5	2.8.5-21.55.1 fixed
suse enterprise server 15 SP4	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP5	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP6	2.8.5-150400.3.40.1 fixed
suse enterprise server 15 SP7	2.8.5-150700.3.15.1 fixed

libmozjs-115-0

suse enterprise desktop 15 SP7	115.4.0-150600.3.14.1 fixed
suse enterprise sap 15 SP6	115.4.0-150600.3.14.1 fixed
suse enterprise sap 15 SP7	115.4.0-150600.3.14.1 fixed
suse enterprise server 15 SP6	115.4.0-150600.3.14.1 fixed
suse enterprise server 15 SP7	115.4.0-150600.3.14.1 fixed

libmozjs-60

suse enterprise desktop 15 SP7	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP4	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP5	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP6	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP7	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP4	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP5	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP6	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP7	60.9.0-150200.6.11.1 fixed

libmozjs-78-0

suse enterprise sap 15 SP4	78.15.0-150400.3.17.1 fixed
suse enterprise sap 15 SP5	78.15.0-150400.3.17.1 fixed
suse enterprise server 15 SP4	78.15.0-150400.3.17.1 fixed
suse enterprise server 15 SP5	78.15.0-150400.3.17.1 fixed

mozjs115-devel

suse enterprise desktop 15 SP7	115.4.0-150600.3.14.1 fixed
suse enterprise sap 15 SP6	115.4.0-150600.3.14.1 fixed
suse enterprise sap 15 SP7	115.4.0-150600.3.14.1 fixed
suse enterprise server 15 SP6	115.4.0-150600.3.14.1 fixed
suse enterprise server 15 SP7	115.4.0-150600.3.14.1 fixed

mozjs60-devel

suse enterprise desktop 15 SP7	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP4	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP5	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP6	60.9.0-150200.6.11.1 fixed
suse enterprise sap 15 SP7	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP4	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP5	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP6	60.9.0-150200.6.11.1 fixed
suse enterprise server 15 SP7	60.9.0-150200.6.11.1 fixed

mozjs78-devel

suse enterprise sap 15 SP4	78.15.0-150400.3.17.1 fixed
suse enterprise sap 15 SP5	78.15.0-150400.3.17.1 fixed
suse enterprise server 15 SP4	78.15.0-150400.3.17.1 fixed
suse enterprise server 15 SP5	78.15.0-150400.3.17.1 fixed