CVE-2026-15928: XSS
Published Jul 27, 2026
·Updated
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.
Affected Software
3 affected components
XMLRPC-C XMLRPC-C Library>=1.07<=1.67.01
IBM QRadar<=7.6.0.0 - 7.6.0.4
IBM QRadar<=7.5.0 - 7.5.0 UP16 IF01
Event History
Jul 27, 2026
CVE Published
via MITRE·02:23 AM
Data Sourced
via MITRE·02:23 AM
DescriptionWeakness
Data Sourced
via Red Hat·03:01 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeakness
Oct 13, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-15928?
CVE-2026-15928 has a risk rating of 29, indicating a critical severity level due to its potential for reflected cross-site scripting.
2
How do I fix CVE-2026-15928?
To fix CVE-2026-15928, update the XMLRPC-C Library to a version beyond 1.67.01 that has addressed the reflected XSS vulnerability.
3
What component is affected in CVE-2026-15928?
CVE-2026-15928 affects the error page component of the XMLRPC-C Library.
4
What types of attacks are possible due to CVE-2026-15928?
CVE-2026-15928 allows attackers to perform reflected cross-site scripting (XSS) attacks, potentially compromising user data.
5
Which versions of the XMLRPC-C Library are vulnerable to CVE-2026-15928?
The vulnerable versions of the XMLRPC-C Library range from 1.07 through 1.67.01.