Bug 2507394 (CVE-2026-15928) - CVE-2026-15928 xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component
Summary: CVE-2026-15928 xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page...
Keywords:
Status: NEW
Alias: CVE-2026-15928
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-27 03:01 UTC by OSIDB Bzimport
Modified: 2026-08-31 10:00 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:61231 0 None None None 2026-08-31 02:15:48 UTC
Red Hat Product Errata RHSA-2026:61232 0 None None None 2026-08-31 02:37:46 UTC
Red Hat Product Errata RHSA-2026:61233 0 None None None 2026-08-31 02:08:15 UTC
Red Hat Product Errata RHSA-2026:61234 0 None None None 2026-08-31 02:19:56 UTC
Red Hat Product Errata RHSA-2026:61235 0 None None None 2026-08-31 02:16:02 UTC
Red Hat Product Errata RHSA-2026:61236 0 None None None 2026-08-31 01:25:01 UTC
Red Hat Product Errata RHSA-2026:61315 0 None None None 2026-08-31 09:54:47 UTC
Red Hat Product Errata RHSA-2026:61316 0 None None None 2026-08-31 10:00:47 UTC

Description OSIDB Bzimport 2026-07-27 03:01:33 UTC 
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.
Comment 2 errata-xmlrpc 2026-08-31 01:25:00 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:61236 https://access.redhat.com/errata/RHSA-2026:61236
Comment 3 errata-xmlrpc 2026-08-31 02:08:14 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:61233 https://access.redhat.com/errata/RHSA-2026:61233
Comment 4 errata-xmlrpc 2026-08-31 02:15:48 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:61231 https://access.redhat.com/errata/RHSA-2026:61231
Comment 5 errata-xmlrpc 2026-08-31 02:16:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:61235 https://access.redhat.com/errata/RHSA-2026:61235
Comment 6 errata-xmlrpc 2026-08-31 02:19:55 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:61234 https://access.redhat.com/errata/RHSA-2026:61234
Comment 7 errata-xmlrpc 2026-08-31 02:37:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:61232 https://access.redhat.com/errata/RHSA-2026:61232
Comment 8 errata-xmlrpc 2026-08-31 09:54:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:61315 https://access.redhat.com/errata/RHSA-2026:61315
Comment 9 errata-xmlrpc 2026-08-31 10:00:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:61316 https://access.redhat.com/errata/RHSA-2026:61316
Note You need to log in before you can comment on or make changes to this bug.