🔐 CVE Alert

CVE-2026-15928

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

CWE CWE-79
Vendor xmlrpc-c
Product xmlrpc-c
Published Jul 27, 2026
Stay Ahead of the Next One

Get instant alerts for xmlrpc-c xmlrpc-c

Be the first to know when new unknown vulnerabilities affecting xmlrpc-c xmlrpc-c are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

XMLRPC-C / XMLRPC-C
1.07 ≤ 1.67.01 1.07 ≤ 1.64.03

References

NVD ↗ CVE.org ↗ EPSS Data ↗
xmlrpc-c.sourceforge.io: https://xmlrpc-c.sourceforge.io/ themissinglink.com.au: https://www.themissinglink.com.au/security-advisories/cve-2026-15928

Credits

Andrew Bick at The Missing Link Security