CVE-2026-92877

Name of the Vulnerable Software and Affected Versions JAXB (affected versions not specified)

Description JAXB factory methods relied exclusively on FEATURE SECURE PROCESSING to prevent XML External Entity (XXE) resolution. In JAXP implementations where this feature is insufficient to block external entity resolution, an attacker can read local files via out-of-band XXE by providing untrusted XML for unmarshalling. XXE is a type of attack that occurs when an XML parser improperly processes external entity references within an XML document.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.