CVE-2026-16626

Vulnerability Description

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.

Related Weaknesses (CWE)

CWE-611

References

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-august-

FAQ

What is CVE-2026-16626?

CVE-2026-16626 is a documented vulnerability. Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0...

How severe is CVE-2026-16626?

CVSS scoring is not yet available for CVE-2026-16626. Check NVD for updates.

Is there a patch for CVE-2026-16626?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.