CVE-2026-61570 | Joniles Mpxj up to 16.4.0 Xml Parser MerlinReader ZTIMEINTERVALS information disclosure

September 22, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Joniles Mpxj up to 16.4.0. Affected by this issue is the function MerlinReader of the component Xml Parser. Performing a manipulation of the argument ZTIMEINTERVALS results in information disclosure.

This vulnerability is reported as CVE-2026-61570. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More