CVE-2026-92001
Received Received - Intake

XML Entity Expansion in Apache Sling XSS

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Apache Software Foundation

Description
Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-92001
EUVD
EUVD-2026-85174

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
apache sling_xss 2.4.12

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-776 The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper handling of recursive entity references in XML DTDs, also known as XML entity expansion. It affects Apache Sling XSS versions before 2.4.12 and could allow attackers to perform denial-of-service attacks or disclose sensitive information through crafted XML input.

Impact Analysis

If exploited, this vulnerability could lead to denial-of-service conditions or unauthorized disclosure of sensitive data. Systems using vulnerable versions of Apache Sling XSS may be at risk if they process untrusted XML input.

Mitigation Strategies

Upgrade Apache Sling XSS to version 2.4.12 or later to address the XML entity expansion vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92001. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart