CVE-2026-45186

HIGH

7.5

CVSS Score

Published: May 10, 2026 at 06:36 AM UTC

Updated: October 15, 2026 at 01:19 AM UTC

5 products affected across 3 vendorsLibexpatEnterprise LinuxSIMATIC S7-1500 CPU 1518-4 Pn /dp MFP Firmware

Using libexpat by libexpat project?

Get instant alerts when new vulnerabilities affect libexpat - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Libexpat · Libexpat Project

95%

v < 2.8.1

Affected range stops below 2.8.1, so it looks safe — our inference, not a vendor statement

Enterprise Linux · Red Hatrpm

60%

Vendor states this is fixed in 0:2.5.0-2.el8_10 (unaffected)

Vendor states this is fixed in 0:2.5.0-6.el9_8.1 (unaffected)

Vendor states this is fixed in 0:2.7.3-1.el10_2.1 (unaffected)

SIMATIC S7-1500 CPU 1518-4 Pn /dp MFP Firmware · Siemens

60%

V3.1.5 ≤ v < V3.1.63.1.5

Affected range stops below V3.1.6, so it looks safe — our inference, not a vendor statement

SIMATIC S7-1500 CPU 1518F 4 Pn /dp MFP Firmware · Siemens

60%

V3.1.5 ≤ v < V3.1.63.1.5

Affected range stops below V3.1.6, so it looks safe — our inference, not a vendor statement

Siplus S7-1500 CPU 1518-4 Pn /dp MFP Firmware · Siemens

60%

V3.1.5 ≤ v < V3.1.63.1.5

Affected range stops below V3.1.6, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://github.com/libexpat/libexpat/pull/1216

References (13)

ExploitIssue TrackingPatch

Source: cverecord

https://github.com/libexpat/libexpat/pull/1216

Mailing ListThird Party Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2026/05/11/16