CVE-2026-6732

HIGH

MEDIUM Priority: 0.05 BB Relevance: 75/100

Published: 2026-04-23 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network

AC: Low

PR: None

UI: None

S: Unchanged

C: None

I: None

A: High

Description

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Weakness Classification (1)

CWE-843

Affected Software (14)

Vendor	Product	Version
ibm	aix	7.2.5 – 7.2.5.12
ibm	aix	7.3.2 – 7.3.3.3
ibm	aix	7.3.4
ibm	vios	4.1.0 – 4.1.1.30
ibm	vios	4.1.2.0
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0
redhat	hardened_images	-
redhat	jboss_core_services	-
redhat	openshift_container_platform	4.0
xmlsoft	libxml2	2.13.0 – 2.15.3