Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-119724 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://www.openwall.com/lists/oss-security/2026/11/02/3 CVEAdvisoryMailing List
https://lists.apache.org/thread.html/xjzhbdcy6vktgdt3svs3yqv15wvzf4rp [email protected]AdvisoryMailing ListVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')[email protected]

Affected Products

ProductVersions
Apache JClouds
< 0.9.0 (semver)

CPE

  • cpe:2.3:a:apache:jclouds:*:*:*:*:*:*:*:*

Remediation

  • Workaround:low effort

    Restrict access to the instance to trusted users.

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-119724
NVD Published Date:
Nov 3, 2026
NVD Last Modified:
Nov 6, 2026
Source:
[email protected]