Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-17 | 1 | General1 |
| 2026-04-28 | 1 | Patch1 |
libexpat 2.8.0 fixes CVE-2026-41080 (insufficient entropy) https://www.openwall.com/lists/oss-security/2026/04/26/1
Post summary
The text announces that libexpat 2.8.0 addresses CVE-2026-41080, citing insufficient entropy as the vulnerability, without any mention of PoC, exploit code or active exploitation.
CVE-2026-41080 libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. https://www.cve.org/CVERecord?id=CVE-2026-41080
Post summary
The notice identifies a hash flooding risk in libexpat 2.7.6 from insufficient entropy, but offers no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libexpat_project | libexpat | - | - | - |