CVE-2026-6732

Published: Apr 23, 2026Modified: Jun 30, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Affected (14)

Products: Xmlsoft: Libxml2 · Redhat: Enterprise Linux, Hardened Images, Jboss Core Services, Openshift Container Platform · Ibm: Aix, Vios

1 product

4 products

Openshift Container Platform

Ibm

2 products

Aix

Vios

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xmlsoft Libxml2	From 2.13.0 to 2.15.3

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Hardened Images	All versions
Redhat Jboss Core Services	All versions
Redhat Openshift Container Platform	Version 4.0