CVE-2026-92001

Analyzed Analyzed - Analysis Complete

XML Entity Expansion in Apache Sling XSS

Publication date: 2026-09-23

Last updated on: 2026-09-30

Assigner: Apache Software Foundation

Description

Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-30

Generated

2026-10-13

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-12

NVD

CVE-2026-92001

EUVD

EUVD-2026-85174

Affected Vendors & Products

Vendor	Product	Version / Range
apache	sling_xss_protection_api	to 2.4.12 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-776	The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper handling of recursive entity references in XML DTDs, also known as XML entity expansion. It affects Apache Sling XSS versions before 2.4.12 and could allow attackers to perform denial-of-service attacks or disclose sensitive information through crafted XML input.

Detection Guidance

This vulnerability is specific to Apache Sling XSS versions before 2.4.12. Detection involves checking the installed version of Apache Sling XSS on your system. Use commands like 'find / -name *sling-xss* 2>/dev/null' to locate the package and 'sling-xss --version' or check version in package managers like 'dpkg -l | grep sling-xss' or 'rpm -qa | grep sling-xss'.

Impact Analysis

If exploited, this vulnerability could lead to denial-of-service conditions or unauthorized disclosure of sensitive data. Systems using vulnerable versions of Apache Sling XSS may be at risk if they process untrusted XML input.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it is specific to XML entity expansion in Apache Sling XSS. No evidence suggests it affects data protection or privacy requirements.

Mitigation Strategies

Upgrade Apache Sling XSS to version 2.4.12 or later to address the XML entity expansion vulnerability.

Hi! I’m here to help you understand CVE-2026-92001. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70