CVE-2026-49236CWE-918

CVE-2026-49236: falha em Apache XML Graphics Batik

Apache XML Graphics Batik: SVG color-profile xml:base bypasses Batik external resource same-origin checks

Publicada em

Seguir esta CVE+ Monitorar Apache XML Graphics Batik

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

0Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Track
Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Produtos afetados
Apache Software Foundation · Apache XML Graphics Batik
CVEs relacionadas — Apache XML Graphics Batik

No mesmo produto, das mais perigosas para as menos.

CVE-2022-44729—Apache XML Graphics Batik: Information disclosure vulnerabilityEPSS 0.9%CVE-2022-44730—Apache XML Graphics Batik: Information disclosure vulnerabilityEPSS 0.8%CVE-2026-89326—Apache XML Graphics Batik: Check url protocol when loading documentEPSS —CVE-2026-44929—SSRF Vulnerability in Apache BatikEPSS —CVE-2026-40853—Apache XML Graphics Batik: Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFontEPSS —CVE-2026-111792—Apache XML Graphics Batik: Denial of Service via SVG Element Reference ResolutionEPSS —