Most recent entries from all

bdu:2026-07341

BELL-CVE-2026-32776

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

certfr-2026-avi-0627 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq…

certfr-2026-avi-0627

EUVD-2026-336382

fkie_cve-2026-32776

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

GHSA-r8fp-cwhw-m8hh

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

ICSA-26-155-04 — Hitachi Energy RTU500

Hitachi Energy is aware of vulnerabilities that affect RTU500 product versions listed in this document. If exploited, these vulnerabilities primarily impact product availability, with potential secondary impacts on confidentiality and integrity. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

msrc_CVE-2026-32776 — libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

msrc_CVE-2026-32776

OESA-2026-1736 — expat security update

Affected: openEuler:22.03-LTS-SP4: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.(CVE-2026-32776)

libexpat before 2.7.5 allows an infinite loop while parsing DTD content.(CVE-2026-32777)

openSUSE-SU-2026:10466-1 — expat-2.7.5-1.1 on GA media

expat-2.7.5-1.1 on GA media

SSA-082556 — SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

SUSE-SU-2026:1137-1 — Security update for expat

Security update for expat

UBUNTU-CVE-2026-32776

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 64 more

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

WID-SEC-W-2026-0733 — libexpat: Mehrere Schwachstellen ermöglichen Denial of Service

Ein lokaler Angreifer kann mehrere Schwachstellen in libexpat ausnutzen, um einen Denial of Service Angriff durchzuführen.