CVE-2026-127031 | Eclipse AAS Model for Java up to 3.0.0 XML Schema Validation XmlSchemaValidator.java XmlSchemaValidator.validateSchema server-side request forgery

November 13, 2026 Yanac

A vulnerability was found in Eclipse AAS Model for Java up to 3.0.0 and classified as critical. This issue affects the function XmlSchemaValidator.validateSchema of the file dataformat-xml/src/main/java/org/eclipse/digitaltwin/aas4j/v3/dataformat/xml/XmlSchemaValidator.java of the component XML Schema Validation. Executing a manipulation can lead to server-side request forgery.

This vulnerability is handled as CVE-2026-127031. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More