THREAT OPS › Threat News › Re: Vulnerabilities fixed in libxml2-2.15.4
Re: Vulnerabilities fixed in libxml2-2.15.4
<p>Posted by Salvatore Bonaccorso on Sep 05</p>Hi,<br /> <br /> FTR, some CVEs got assigned for issues fixed in 2.15.4: <br /> <br /> <a href="https://www.cve.org/CVERecord?id=CVE-2026-86137:" rel="nofollow">https://www.cve.org/CVERecord?id=CVE-2026-86137:</a><br /> | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds<br /> | read, aka an out-of-bounds read in the NXT macro in x
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2026-86137cve
- CVE-2026-86138cve
- https://www.cve.org/CVERecord?id=CVE-2026-86137:url
- https://www.cve.org/CVERecord?id=CVE-2026-86138url
Original source: https://seclists.org/oss-sec/2026/q3/657