Unrated severityNVD Advisory· Published Sep 23, 2026
CVE-2026-92001
CVE-2026-92001
Description
Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS.
This issue affects Apache Sling XSS: before 2.4.12.
Users are recommended to upgrade to version 2.4.12, which fixes the issue.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.