Critical 2 vendors · 2 advisories

CVE-2026-40682

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

Critical9.1Apache OpenNLP DictionaryEntryPersistor: XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Af…May 4, 2026

Linux1 advisory

High7.5XML External Entity (XXE) vulnerability via crafted dictionary parsingMay 4, 2026