Dashboard / CVE-2026-49236

CVE-2026-49236

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-11 Modified: 2026-11-12 First seen: 2026-11-11 Status: pending_score

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Apache Software Foundation Apache XML Graphics Batik 0
Apache Software Foundation Apache XML Graphics Batik 0

References & Advisories (3)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.20%
Raw Score 0.001990
Percentile 9.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00199
2026-11-12
0.00199

Intelligence Sources

mitre ref →
nvd ref →

External Links