CWE-776

CWE-776 · 8 records · 5 with a public proof-of-concept

Records the NVD classes under CWE-776, highest CVSS first.

  1. HIGH 7.5CVE-2026-115506public PoC2026-10-22

    libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nest…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.5CVE-2026-1080392026-10-09

    By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A very large request could therefore use a lot of memory and CPU during parsing, especially where CXF builds a DOM from the input (for e…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 6.5CVE-2026-111252public PoC2026-10-15

    A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very …

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 6.1CVE-2026-920012026-09-23

    Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue.

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 4.9CVE-2026-74030public PoC2026-10-13

    Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attackers controlling the manager can push a small SCA policy with nested aliases via …

    AI risk analysis on Exploit-DB.ai →

  6. UNSCOREDCVE-2026-108358public PoC2026-10-22

    PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, XmlScanner::scan in src/PhpSpreadsheet/Reader/Security/XmlScanner.php uses a DOCTYPE detection pattern that accounts for NUL-byt…

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-108357public PoC2026-10-22

    PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. From 3.3.0 until 3.10.8 and 5.10.0, Reader\Xml passes stored SpreadsheetML XML through XmlScanner::scan in Xml::canRead and Xml::trySimpleXMLLoadStringPrivate, while Xml::unentity …

    AI risk analysis on Exploit-DB.ai →

  8. UNSCOREDCVE-2026-1080862026-10-20

    ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including …

    AI risk analysis on Exploit-DB.ai →