VulnSocial

CVE-2021-42260Active Exploitation(debian / debian_linux)

MEDIUMCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for debian debian_linux systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

debian CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-835

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • tinyxml

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
debiantinyxml_project
Products
debian_linuxtinyxml

4 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-01: 1Active Exploitation · 2026-09-01: 1Technical Details · 2026-09-01: 109-01
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    Attackers exploit CVE-2021-42260 in Rockwell Automation industrial controllers by sending crafted data packets that trigger infinite loops, forcing major nonrecoverable faults. Recovery requires manual program downloads, causing significant manufacturing downtime. Runtime segmentation helps contain OT network exposure. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/rockwell-automation-controllogix-cve-2021-42260-denial-service-vulnerability-icsa-26-244-05

    Post summary

    Attackers are actively exploiting CVE-2021-42260 in Rockwell Automation controllers by sending crafted packets that trigger infinite loops, leading to nonrecoverable faults and significant manufacturing downtime.

    0000062
    2.0K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux10.0--
OSdebiandebian_linux9.0--
Apptinyxml_projecttinyxml---
Apptinyxml_projecttinyxml2.3.0--
Apptinyxml_projecttinyxml2.3.1--

Explore more

Back to dashboarddebian CVEstinyxml_project CVEsdebian_linux vulnerabilities