UBUNTU-CVE-2026-126627: Medium severity ubuntu/fop vulnerability
Published Nov 12, 2026
·Updated
Creation of Temporary File With Insecure Permissions vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: through 2.11. Users are recommended to upgrade to version 2.12, which fixes the issue.
Affected Software
7 affected components
ubuntu/fop*
ubuntu/fop*
ubuntu/fop*
ubuntu/fop*
ubuntu/fop*
ubuntu/fop*
ubuntu/fop*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache XML Graphics FOPto a version that resolves this vulnerability.Fixed in 2.12
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which versions need to be remediated?
Apache XML Graphics FOP versions through 2.11 are affected. Upgrade to version 2.12, which fixes the issue.
2
What is the severity of this issue?
The issue is rated medium severity with a score of 4.