UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-49236
Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics Batik. SVG color-profile xml:base bypasses Batik external resource same-origin checks This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cve id
- CVE-2026-49236
- First seen by Signal
- 2026-11-11T15:41:39+00:00
- Name
- CVE-2026-49236
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Published at
- 2026-11-11T14:17:43.253
- Last modified
- 2026-11-11T19:17:41.083
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph