CVE WATCH / VULNERABILITY DETAIL
CVE-2026-49236
UNKNOWNCVSS 0NVD feed
Published 11 November 2026 · tracked since 12 November 2026
Description
Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-82978 MEDIUM 4.3
- CVE-2026-77168 MEDIUM 4.3
- CVE-2026-68486 MEDIUM 5.4
- CVE-2026-68485 MEDIUM 4.3
- CVE-2026-65820
- CVE-2026-62971 HIGH 7.2
- CVE-2026-108562 MEDIUM 5.4
- CVE-2026-108560 MEDIUM 6.1
- CVE-2026-107662 HIGH 8.8
- CVE-2026-77882 HIGH 7.8