CVE-2026-12975
Apicurio/apicurio-registry: apicurio-registry: unhardened saxparser in content-type detection leads to blind xxe / ssrf / billion-laughs dos
CVSS Score
8.5
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission (or unauthenticated when the registry runs with default configuration) can upload a crafted XML document to trigger blind server-side request forgery (SSRF) via external DTD/entity fetch, or cause denial of service via entity expansion.
| CWE | CWE-611 |
| Vendor | red hat |
| Product | red hat build of apicurio registry 3.3.1 |
| Published | Jun 25, 2026 |
| Last Updated | Aug 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat build of apicurio registry 3.3.1
Be the first to know when new high vulnerabilities affecting red hat red hat build of apicurio registry 3.3.1 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
None
Availability
High
Affected Versions
Red Hat / Red Hat build of Apicurio Registry 3.3.1
All versions affected Red Hat / Red Hat build of Apicurio Registry 3.3.1
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:59360 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-12975 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2491688 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12975.json