CVE-2022-25236
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
CVSS
9.8
Critical
EPSS
35.3%
p98
KEV
—
Exploit Today
30
0-100
Published: Feb 16, 2022 · Last modified: Oct 14, 2026 · CWE-668
34.2%EPSS · 30 days35.9%
2026-09-232026-10-21
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2022/02/19/1
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/561
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220303-0008/
- www.debian.orghttps://www.debian.org/security/2022/dsa-5085
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- packetstormsecurity.comhttp://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2022/02/19/1
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
- github.comhttps://github.com/libexpat/libexpat/pull/561
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
- security.gentoo.orghttps://security.gentoo.org/glsa/202209-24
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220303-0008/
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1129366.1 MED11.6%
——3filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory to redirect database creation and locking or split mutual exclusion between targets. This issue is fixed in version 4.0.9.2dCVE-2025-101498.2 HIG7.0%
——2The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including arbitrary operations.
A malicious actor authenticated as a federated user may perform arbitrary operations on local user accounts via the SCIM 2.0 or SCIM 1.1 endpoints when local and federated users share the same username. This could lead to user account takeover. Deployments that do not support user self-registration are considered medium severity.2dCVE-2026-1063544.3 MED9.4%
——3Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)8dCVE-2026-1040737.6 HIG19.4%
——6NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template context. Attackers can craft a custom link template embedding request.COOKIES['sessionid'] or a user's API token into an img src URL, which bypasses the clean_html sanitizer and auto-exfiltrates the victim's credentials to an attacker-controlled host when a privileged user views the object, enabling full account takeover.15dCVE-2026-1057546.5 MED18.0%
——5vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-supplied tensors in the features.kwargs_data field, cache identifiers in the features.mm_hashes field, ranges in the features.mm_placeholders field, and wire-selected multimodal field processors without rebinding them to the active model renderer contract. Forged grid geometry, field types, or non-positive placeholder lengths can terminate the shared EngineCore; when an attacker knows or can induce a victim's content hash, forged cache hashes can poison or retrieve cross-request encoder-cache state; and dropped sparse placeholder masks can alter replayed transport semantics. This issue is fixed in version 0.30.0.14dCVE-2026-1057462.2 LOW12.2%
——4Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kserve_v2_ocr_model.py sends page images to its configured endpoint without checking the pipeline_options.enable_remote_services setting, even when the caller sets that policy control to false. The StandardPdfPipeline._make_ocr_model method also fails to pass the flag into the OCR factory, allowing remote OCR processing in configurations that rely on remote services being disabled. The destination is configured by the caller rather than selected by an attacker. This issue is fixed in 2.131.0.15d