CVE-2026-24515

low

Red Hat

CVSS v3 Base Score

2.9

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Score

0.0%

Exploitation probability in 30 days

Top 100% most likely to be exploited

Attack Characteristics

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Confidentiality

None

Integrity

None

Availability

Low

Published: January 23, 2026 (111 days ago)

Last Modified: January 23, 2026

Vendor: Red Hat

Description

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

CWE-476

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9