CVE-2026-32776

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
libexpat projectlibexpat< 2.7.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.5, < V3.1.6
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.5, < V3.1.6
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.5, < V3.1.6
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.5, < V3.1.6
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.5, < V3.1.6

References

Timeline

Published
Mar 16, 2026
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-327775.5libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-327785.5libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.CVE-2026-32786.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allowsCVE-2026-327886.7Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User ApplicationCVE-2026-32796.5The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check oCVE-2026-327917.0Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User ApplicationCVE-2026-327925.3NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enCVE-2026-327944.8Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate certificates for conCVE-2026-328025.3Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with locaCVE-2026-328033.3Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 conCVE-2026-328048.1Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with aCVE-2026-328057.5Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration t