CVE-2026-71395

Not scored yetLast modified Nov 11, 2026

Description

unsafe deserialization in hyphenation loading vulnerability in Apache XML Graphics FOP.

This issue affects Apache XML Graphics FOP: through 2.11.

Users are recommended to upgrade to version 2.12, which fixes the issue.

Metrics

No CVSS score has been published yet.

Weakness enumeration

CWE-502

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 11, 2026
Last modified
Nov 11, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-713965.4Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.CVE-2026-713978.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attackers to exhaust meCVE-2026-7139810.0Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the coCVE-2026-713997.8Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. AnCVE-2026-71409.8A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgiCVE-2026-714015.3An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verifyCVE-2026-714025.4An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IPCVE-2026-714036.1A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalIdCVE-2026-714048.7A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.CVE-2026-714078.1A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attCVE-2026-714085.3A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortCVE-2026-71415.6A vulnerability was found in vLLM up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v1/kv_cache_interface
CVE-2026-71395: Unscored | Vulnix