CVE-2016-15026

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. An attack has to be approached locally. Upgrading to version 1.18 is able to address this issue. The patch is identified as 8c954e8d9f6f6863729e50105a8abf3f87fff74c. It is recommended to upgrade the affected component. VDB-221486 is the identifier assigned to this vulnerability.

• CWE-611

• https://github.com/3breadt/dd-plist/commit/8c954e8d9f6f6863729e50105a8abf3f87fff74cPatch
• https://github.com/3breadt/dd-plist/pull/26Issue Tracking, Patch
• https://github.com/3breadt/dd-plist/releases/tag/dd-plist-1.18Release Notes
• https://vuldb.com/?ctiid.221486Permissions Required, Third Party Advisory
• https://vuldb.com/?id.221486Permissions Required, Third Party Advisory
• https://github.com/3breadt/dd-plist/commit/8c954e8d9f6f6863729e50105a8abf3f87fff74cPatch
• https://github.com/3breadt/dd-plist/pull/26Issue Tracking, Patch
• https://github.com/3breadt/dd-plist/releases/tag/dd-plist-1.18Release Notes
• https://vuldb.com/?ctiid.221486Permissions Required, Third Party Advisory
• https://vuldb.com/?id.221486Permissions Required, Third Party Advisory

Published

Feb 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-15020A vulnerability was found in liftkit database up to 2.13.1. …9.8
• CVE-2016-15021A vulnerability was found in nickzren alsdb. It has been rat…9.8
• CVE-2016-15022A vulnerability was found in mosbth cimage up to 0.7.18. It …6.1
• CVE-2016-15023A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2016-15024A vulnerability was found in doomsider shadow. It has been c…5.5
• CVE-2016-15025A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2016-15027A vulnerability was found in meta4creations Post Duplicator …6.1
• CVE-2016-15028A vulnerability was found in ICEPAY REST-API-NET 0.9. It has…5.9
• CVE-2016-15029A vulnerability has been found in Ydalb mapicoin up to 1.9.0…6.1
• CVE-2016-1503dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5…
• CVE-2016-15030A vulnerability classified as problematic has been found in …6.1
• CVE-2016-15031A vulnerability was found in PHP-Login 1.0. It has been decl…9.8