CVE-2026-6732
MEDIUM 6.5 ALL-YEARSA flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.6%chance of exploitation in 30 days · 50th percentile
Impact if exploited
6.5CVSS 3.1 · MEDIUM · CNA
- ConfidentialityNone
- IntegrityNone
- AvailabilityHigh
What an attacker needs
- ⚠Access: Must sit on the same / adjacent network
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Affected
Vendors Red Hat Xmlsoft Redhat Ibm
Products Red Hat Hardened Images Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Jboss Core Services Red Hat Openshift Container Platform 4 Libxml2 Hardened Images Jboss Core Services Openshift Container Platform Enterprise Linux Vios Aix
Weakness (CWE)
- CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References and research data (JSON)
Vendor product assessments
libxml2-main@aarch64 as a component of Red Hat Hardened Images · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
libxml2-main@src as a component of Red Hat Hardened Images · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
libxml2-main@x86_64 as a component of Red Hat Hardened Images · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
libxml2 as a component of Red Hat JBoss Core Services · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/libxml2
- none available: Fix deferred
libxml2 as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-devel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-devel
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-static as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-static
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2.src as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2?arch=src
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00python3-libxml2 as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python3-libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2 as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-devel as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-devel
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-python as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-python
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-static as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-static
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2.src as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2?arch=src
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2 as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-devel as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-devel
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-python as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-python
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-static as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-static
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2.src as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2?arch=src
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2 as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-devel as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-devel
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2.src as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2?arch=src
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00python3-libxml2 as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python3-libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2 as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2-devel as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2-devel
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00libxml2.src as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libxml2?arch=src
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00python3-libxml2 as a component of Red Hat Enterprise Linux 9 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python3-libxml2
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Xmlsoft | Libxml2 | ≥ 2.13.0 and < 2.15.3 |
| Redhat | Hardened Images | * |
| Redhat | Jboss Core Services | * |
| Redhat | Openshift Container Platform | 4.0 |
| Redhat | Enterprise Linux | 6.0 |
| Redhat | Enterprise Linux | 7.0 |
| Redhat | Enterprise Linux | 8.0 |
| Redhat | Enterprise Linux | 9.0 |
| Redhat | Enterprise Linux | 10.0 |
| Ibm | Vios | ≥ 4.1.0 and < 4.1.1.30 |
| Ibm | Vios | 4.1.2.0 |
| Ibm | Aix | ≥ 7.2.5 and < 7.2.5.12 |
| Ibm | Aix | ≥ 7.3.2 and < 7.3.3.3 |
| Ibm | Aix | 7.3.4 |
All CVSS metrics
- MEDIUM 6.5 v3.1 · CNA Primary
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - MEDIUM 6.5 v3.1 · NVD Secondary
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - HIGH 7.5 v3.1 · NVD Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Exploit-tagged references (not proof of a PoC)
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097 CVE record · redhat · Updated 2026-08-31T11:15:35.301Z
NVD · CVE-2026-6732 · Updated 2026-08-31T12:17:56.307
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00
Advisories
- https://access.redhat.com/errata/RHSA-2026:11503 CVE record · redhat · Updated 2026-08-31T11:15:35.301Z
NVD · CVE-2026-6732 · Updated 2026-08-31T12:17:56.307
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00 - https://access.redhat.com/security/cve/CVE-2026-6732 CVE record · redhat · Updated 2026-08-31T11:15:35.301Z
NVD · CVE-2026-6732 · Updated 2026-08-31T12:17:56.307
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00 - https://bugzilla.redhat.com/show_bug.cgi?id=2461300 CVE record · redhat · Updated 2026-08-31T11:15:35.301Z
NVD · CVE-2026-6732 · Updated 2026-08-31T12:17:56.307
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00 - https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411 CVE record · redhat · Updated 2026-08-31T11:15:35.301Z
NVD · CVE-2026-6732 · Updated 2026-08-31T12:17:56.307
Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00 - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6732.json Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25346 EUVD · EUVD-2026-25346
Technical & other
- https://www.cve.org/CVERecord?id=CVE-2026-6732 Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-6732 Red Hat · CVE-2026-6732 · Updated 2026-08-31T11:15:31+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS