CVE-2026-32327: Apache Portable Runtime Utility: apr-util XML stack recursion crash

Overview

Severity
Medium (CVSS 5.3)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploit Status
Not Exploited
Patch Tuesday
2026-Aug
Released
2026-08-07
EPSS Score
0.34% (percentile: 27.1%)

Affected Products (1)

Open Source Software

  • azl3 apr-util 1.6.3-2 on Azure Linux 3.0

Revision History

  • 2026-08-07: Information published.