CVE-2026-6732

MEDIUM

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

CVSS v3.1 Score

6.5
MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Published: 4/23/2026Modified: 10/26/2026

Related Intelligence (1)

CRITICALApt

Hitachi Energy RTU500 Product

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-293-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. These vulnerabilities if exploited can have impact on confidentiality, integrity and availability of the product. Please refer to

CVE-2026-17539CVE-2026-28388
CISA Advisories

References (5)

https://access.redhat.com/errata/RHSA-2026:11503Third Party Advisoryhttps://access.redhat.com/security/cve/CVE-2026-6732Third Party Advisoryhttps://bugzilla.redhat.com/show_bug.cgi?id=2461300Issue TrackingThird Party Advisoryhttps://gitlab.gnome.org/GNOME/libxml2/-/issues/1097ExploitIssue Trackinghttps://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411Issue TrackingThird Party Advisory