CVE-2026-89326
Last modified
CVE-2026-89326 is a vulnerability of currently unknown severity. Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache XML Graphics Batik | <= 1.19.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-89326?
How severe is CVE-2026-89326?
How do I fix CVE-2026-89326?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8932libcurl would reuse a previously created connection even whe…7.5
- CVE-2026-89320`HmacShaCryptor.Hash` never hashed its input. For any input …8.8
- CVE-2026-89321Publishing limits the compressed size of a VSIX (ovsx.publis…4.3
- CVE-2026-89322Vault and Vault Enterprise did not consistently evaluate ACL…7.2
- CVE-2026-89324The Basel Post Types plugin for WordPress is vulnerable to A…9.8
- CVE-2026-89325An uncontrolled search path element in InsightVM assessment …7.8
- CVE-2026-89327The FluentBoards WordPress plugin before 2.0.15 does not ve…3.8
- CVE-2026-89328The FluentBoards WordPress plugin before 2.0.15 does not pr…3.8
- CVE-2026-89329A flaw was found in `multipathd`. A local attacker with acce…6.2
- CVE-2026-8933A local privilege escalation vulnerability exists in snap-co…7.8
- CVE-2026-89330The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Revie…6.1
- CVE-2026-89331The FluentBoards WordPress plugin before 2.1.0 does not pro…5.3
Are you affected by CVE-2026-89326?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST