Security Advisory

CVE-2026-16626

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 18:00:20
Last updated 2026-08-11 15:58:33
Assigner Jaspersoft
CVSS score 9.3
State PUBLISHED

Description

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.