CVE-2026-88789

Published 1 October 2026 · tracked since 2 October 2026

Description

Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103686 LOW 3.5
• CVE-2026-102504 HIGH 7.5
• CVE-2026-103067 HIGH 8
• CVE-2026-94250
• CVE-2026-94269
• CVE-2026-94276
• CVE-2026-94212
• CVE-2026-94220
• CVE-2026-82806
• CVE-2026-78242

→ Open the live CVE board · all tools