PT-2026-68518

CVE-2026-32327

·

Published

2026-08-06

·

Updated

2026-09-21

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions APR-util versions prior to 1.6.4
Description A bug allows a stack recursion attack against any library consumer that parses XML from untrusted sources and utilizes the apr xml quote elem() function.
Recommendations Upgrade to version 1.6.4.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-674: Uncontrolled Recursion
Related identifiers
CVE-2026-32327
ALSA-2026:66341
ALSA-2026:66392
ALSA-2026:69113
AZL-94514
BIT-APR-UTIL-2026-32327
CLSA-2026-1786481279
CLSA-2026-1786495987
CLSA-2026-1786553851
CLSA-2026-1787141541
ECHO-0E0B-03FE-EB59
OESA-2026-3325
OESA-2026-3326
OESA-2026-3327
OESA-2026-3328
OESA-2026-3409
OPENSUSE-SU-2026:21672-1
SUSE-SU-2026:23551-1
SUSE-SU-2026:3905-1
SUSE-SU-2026:3937-1
SUSE-SU-2026:3938-1
USN-8719-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com