CVE-2026-7210

HighCVSS 7.5/10Last modified Oct 2, 2026

Description

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-331

Affected software

No affected versions have been published.

Timeline

Published
May 11, 2026
Last modified
Oct 2, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-721008.8In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits If dm_integrity_chCVE-2026-72101In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel memory If hash size is CVE-2026-721027.8In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_resume failure If dm_resCVE-2026-721037.3In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device fileCVE-2026-72104In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parseCVE-2026-721057.8In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit machines Commit c20e36b763CVE-2026-72106In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->CVE-2026-721078.8In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zero start sector dm-eCVE-2026-721087.8In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consistency on commit failure CVE-2026-721097.8In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5_regisCVE-2026-72117.3A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.CVE-2026-721107.8In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe ->bpf_storage before bailouts that access it Currently,
CVE-2026-7210: High severity, CVSS 7.5 | Vulnix