CVE-2026-16180
Medium · 5.7CVSS
5.7
EPSS
0.2%
Published
Sep 4, 2026
CISA due date
—
The record
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an authenticated user to cause a denial-of-service condition due to improper validation of XML entities.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-58234 SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted… CWE-776
- CVE-2026-78681 NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules… CWE-776
- CVE-2026-3415 The XML and schema validation functionalities within the SchemaValidator Mediator process… CWE-776
- CVE-2026-44018 Docling simplifies document processing by parsing diverse formats and providing… CWE-776
- CVE-2026-12993 A flaw was found in Apicurio Registry. CWE-776
- CVE-2026-44020 Docling simplifies document processing by parsing diverse formats and providing… CWE-776
- CVE-2026-45771 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-776
- GHSA-5qf9-cf9c-hjc6 Routinator crashes when encountering maliciously crafted RRDP XML files CWE-776