Most recent entries from all

ALSA-2026:61316 — Important: xmlrpc-c security update

Affected: AlmaLinux:9: xmlrpc-c, AlmaLinux:9: xmlrpc-c-c++, AlmaLinux:9: xmlrpc-c-client, AlmaLinux:9: xmlrpc-c-client++, AlmaLinux:9: xmlrpc-c-devel

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-341256

fkie_cve-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

GHSA-mrjw-v97f-vmwh

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

OESA-2026-3384 — xmlrpc-c security update

Affected: openEuler:24.03-LTS-SP3: xmlrpc-c

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

openSUSE-SU-2026:11409-1 — libxmlrpc++9-1.64.03-2.1 on GA media

libxmlrpc++9-1.64.03-2.1 on GA media

RHSA-2026:61231 — Red Hat Security Advisory: xmlrpc-c security update

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

RLSA-2026:61316 — Important: xmlrpc-c security update

Affected: Rocky Linux:9: xmlrpc-c

Security Fix(es):

* xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:23311-1 — Security update for xmlrpc-c

Security update for xmlrpc-c

UBUNTU-CVE-2026-15928

Affected: Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: xmlrpc-c, Ubuntu:Pro:18.04:LTS: xmlrpc-c, Ubuntu:Pro:20.04:LTS: xmlrpc-c, Ubuntu:Pro:22.04:LTS: xmlrpc-c, Ubuntu:Pro:24.04:LTS: xmlrpc-c, Ubuntu:26.04:LTS: xmlrpc-c

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

WID-SEC-W-2026-3078 — Red Hat Enterprise Linux (xmlrpc-c): Schwachstelle ermöglicht Cross-Site Scripting

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.