CyberStack

CVE intelligence

CVE-2026-108086

** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache

Published 2026-10-20 · CVSS high

NIST record