Skip to content

CVE record · 1 source

CVE-2026-61586

CVSS 8.2

Copernik XML Factory provides secure-by-default JAXP factory creation for Java.

Vendor: Copernik-Eu
Product: copernik-xml-factory
CVSS v4.0: 8.2 AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-611
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

32

CVE NVD 37h ago

Copernik XML Factory provides secure-by-default JAXP factory creation for Java.

Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Copernik XML Factory does not block XInclude resource resolution on the stock JDK provider after an application enables XInclude on a…

CVSS 8.2 Fix available CVE-2026-61586 Copernik-Eu