CVE-2026-0990: Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

Overview

Severity

Medium (CVSS 5.9)

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Status

Not Exploited

Patch Tuesday

2026-Jan

Released

2026-01-19

Last Updated

2026-03-04

EPSS Score

0.06% (percentile: 19.0%)

Affected Products (5)

Other

• 20604-17086
• 20622-17084
• 20825-17084
• 20901-17086
• 20960-17084

Revision History

• 2026-01-19: Information published.
• 2026-01-19: Information published.
• 2026-01-20: Information published.
• 2026-02-18: Information published.
• 2026-02-23: Information published.
• 2026-03-04: Information published.