CVE-2026-91765

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The SOAP XML parser contains a flaw where the cleanup xml node() function recurses once per XML nesting level without a depth limit. An unauthenticated attacker can send a SOAP request with tens of thousands of nested elements to any SoapServer endpoint, leading to stack exhaustion and a process crash. This unbounded recursion also affects the SOAP value decoder and the WSDL node search helper.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.