← All advisories

Critical severityNVD Advisory· Published Aug 10, 2026

CVE-2026-16626

CVE-2026-16626

Description

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server.

This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.

Affected products

1

Jaspersoft/JasperReport Serversllm-fuzzy

Patches

Vulnerability mechanics

References

1

community.jaspersoft.com/advisories/jaspersoft-security-advisory-august-05-2026-jasperreports-server-cve-2026-16626-r12/nvd

News mentions

0

No linked articles in our index yet.