Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Weakness type CWE-776 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 12 | 12 | 0 |
▃▃▁▁██▅
2026-02 1 · 2026-03 1 · 2026-04 0 · 2026-05 0 · 2026-06 4 · 2026-07 4 · 2026-08 2
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-26278 | 7.5 | 55.1 | — | fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) |
| CVE-2026-45304 | 8.7 | 53.9 | — | Symfony: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expan… |
| CVE-2026-45133 | 8.2 | 51.8 | — | Symfony: [Yaml] Harden the parser when handling untrusted input |
| CVE-2026-29074 | 7.5 | 46.6 | — | SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) |
| CVE-2026-14979 | 7.5 | 32.0 | — | IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expa… |
| CVE-2026-73569 | 8.7 | 30.4 | — | fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits |
| CVE-2026-45771 | 7.5 | 27.5 | — | Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion |
| CVE-2026-3415 | 8.7 | 27.4 | — | XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products All… |
| CVE-2026-44020 | 7.5 | 26.0 | — | Docling: Unsafe XML Entity Expansion in USPTO Patent Backend |
| CVE-2026-14865 | 5.3 | 17.3 | — | XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX |
| CVE-2026-12993 | 6.5 | 15.8 | — | Apicurio/apicurio-registry: apicurio-registry: xml entity-expansion denial of service v… |
| CVE-2026-44018 | 7.1 | 1.7 | — | Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS Backend |
| Vendor | CVEs |
|---|---|
| docling-project | 2 |
| naturalintelligence | 2 |
| symfony | 2 |
| ibm | 1 |
| progress | 1 |
| red hat | 1 |
| signalwire | 1 |
| svg | 1 |
| wso2 | 1 |