CVE-2026-61586 | Copernik XML Factory up to 0.1.1 XInclude server-side request forgery

October 2, 2026 Yanac

A vulnerability has been found in Copernik XML Factory up to 0.1.1 and classified as problematic. This impacts the function XmlFactories.newDocumentBuilderFactory/XmlFactories.newSAXParserFactory/XmlFactories.harden of the component XInclude. The manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-61586. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More