Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURE_SECURE_PROCESSING. An attacker with artifact-write permission can upload XML documents with internal entity-expansion payloads (billion-laughs variant) that cause CPU and heap exhaustion, partially mitigated by the JAXP default 64,000 entity-expansion limit.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-12993 XML Entity Expansion Denial of Service in Apicurio Registry Artifact Upload https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12993
Post summary
The statement announces CVE-2026-12993, noting that Apicurio Registry's artifact upload is vulnerable to an XML Entity Expansion Denial of Service attack, without providing further details on PoC, patch, or exploitation.
🚨*CVE* CVE-2026-12993 A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable… https://www.cve.org/CVERecord?id=CVE-2026-12993 ----- Traducción: Se encontró una fa… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026‑12993, a flaw in Apicurio Registry where DocumentBuilderAccessor permits DOCTYPE declarations despite blocking external DTDs, but it provides no exploit or patch information.
CVE-2026-12993 A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable… https://www.cve.org/CVERecord?id=CVE-2026-12993
Post summary
The post announces a flaw in Apicurio Registry related to DOCTYPE handling, providing technical details but no exploits, PoC, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_apicurio_registry | - | - | - |