CVE-2026-45186
EUVD-2026-2898510.05.2026, 07:16
In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libexpat_project | libexpat | 𝑥 < 2.8.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.7.3-1.el10_2.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 0:2.5.0-2.el8_10 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.5.0-6.el9_8.1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1782159791 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1782166952 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1781525684 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1781525671 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1781525693 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Update Infrastructure 5 | 1781525739 ≤ 𝑥 < * | ADP |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.5 ≤ 𝑥 < V3.1.6 | ADP |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.5 ≤ 𝑥 < V3.1.6 | ADP |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.5 ≤ 𝑥 < V3.1.6 | ADP |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.5 ≤ 𝑥 < V3.1.6 | ADP |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.5 ≤ 𝑥 < V3.1.6 | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| expat |
| ||||||||||||||||
| xmlrpc-c |
| ||||||||||||||||
| wbxml2 |
| ||||||||||||||||
| swish-e |
| ||||||||||||||||
| cadaver |
| ||||||||||||||||
| tdom |
| ||||||||||||||||
| apache2 |
| ||||||||||||||||
| apr-util |
| ||||||||||||||||
| ayttm |
| ||||||||||||||||
| cableswig |
| ||||||||||||||||
| cmake |
| ||||||||||||||||
| coin3 |
| ||||||||||||||||
| firefox |
| ||||||||||||||||
| gdcm |
| ||||||||||||||||
| ghostscript |
| ||||||||||||||||
| insighttoolkit4 |
| ||||||||||||||||
| libxmltok |
| ||||||||||||||||
| matanza |
| ||||||||||||||||
| smart |
| ||||||||||||||||
| texlive-bin |
| ||||||||||||||||
| thunderbird |
| ||||||||||||||||
| vnc4 |
| ||||||||||||||||
| vtk |
|
Red Hat Enterprise Linux Releases
Amazon Linux Releases
References