CVE-2026-119724

UNKNOWN 0.0

Apache JClouds: XML External Entity (XXE) in provider-response parsing

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CWE	CWE-776
Vendor	apache software foundation
Product	apache jclouds
Published	Nov 3, 2026
Last Updated	Nov 3, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache jclouds

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache jclouds are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache JClouds

0 < *

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread.html/xjzhbdcy6vktgdt3svs3yqv15wvzf4rp openwall.com: http://www.openwall.com/lists/oss-security/2026/11/02/3

Credits

🔍 Gjoko Krstic