p PatchFirst

CVE-2026-15928

CVE-2026-15928

This page contains facts from public vulnerability sources. Check the original advisory before updating.

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

CVSS 8.2 · High · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • xmlrpc-c

    Versions
    • ≥ 1.07, ≤ 1.67.01: Affected (Advanced)
    • ≥ 1.07, ≤ 1.64.03: Affected (Super stable)

    No fix published

  • xmlrpc-c Debian:12

    Versions
    • 1.33.14-11
    • 1.33.14-11.1
    • 1.33.14-11.1~exp1
    • 1.33.14-12
    • 1.59.03-1
    • 1.59.03-10
    • 1.59.03-10.1
    • 1.59.03-2
    • 1.59.03-3
    • 1.59.03-4
    • 1.59.03-5
    • 1.59.03-6
    • 1.59.03-7
    • 1.59.03-8
    • 1.59.03-9
    • 1.60.05-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Debian:13

    Versions
    • 1.59.03-10
    • 1.59.03-10.1
    • 1.60.05-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Debian:14

    Versions
    • 1.59.03-10
    • 1.59.03-10.1
    • 1.60.05-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:14.04:LTS

    Versions
    • 1.16.33-3.2ubuntu3
    • 1.33.06-0ubuntu1
    • 1.33.06-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:16.04:LTS

    Versions
    • 1.33.14-0.2ubuntu3
    • 1.33.14-1ubuntu1
    • 1.33.14-1ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:18.04:LTS

    Versions
    • 1.33.14-7
    • 1.33.14-8
    • 1.33.14-8build1
    • 1.33.14-8ubuntu0.18.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:20.04:LTS

    Versions
    • 1.33.14-8build1
    • 1.33.14-8build2
    • 1.33.14-8ubuntu0.20.04.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:22.04:LTS

    Versions
    • 1.33.14-9
    • 1.33.14-10
    • 1.33.14-10ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:Pro:24.04:LTS

    Versions
    • 1.33.14-11
    • 1.33.14-11.1
    • 1.33.14-12
    • 1.33.14-12build1
    • 1.33.14-12build2
    • 1.33.14-12ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:26.10

    Versions
    • 1.60.05-1
    • 1.60.05-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xmlrpc-c Ubuntu:26.04:LTS

    Versions
    • 1.59.03-10.1
    • 1.60.05-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →