CVE-2026-78689 | F5 NGINX JavaScript up to 1.0.0 XML module xml.exclusiveC14n out-of-bounds write

A vulnerability has been found in F5 NGINX JavaScript up to 1.0.0 and classified as critical. This affects the function xml.exclusiveC14n of the component XML module. This manipulation causes out-of-bounds write.

This vulnerability is handled as CVE-2026-78689. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More