Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
9 versions affected across 7 products
🔍 Lambda Watchdog detected that CVE-2026-0992 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/404 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
AWS Lambda base images have been updated to remove CVE-2026-0992, indicating the vulnerability has been patched or mitigated.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | ibm | aix | - | - | - |
| OS | ibm | aix | 7.3.4 | - | - |
| App | ibm | vios | - | - | - |
| App | ibm | vios | 4.1.2.0 | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 6.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |
| App | redhat | hardened_images | - | - | - |
| App | redhat | jboss_core_services | - | - | - |
| App | redhat | openshift_container_platform | 4.0 | - | - |
| App | xmlsoft | libxml2 | - | - | - |