Every CVE Search/ Get API key

CVE-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting...

8.2 HighFix available

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Active

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.28%Unchanged since Jul 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.2

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
CVE-2026-15928
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2026-49062 8.2

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
EUVD-2026-49062
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-mrjw-v97f-vmwh 8.2

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting...

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
GHSA-mrjw-v97f-vmwh
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-79
Updated
2026-11-02
NVD 8.2

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
CVE-2026-15928
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-79
Updated
2026-11-02
OSVDEBIAN-CVE-2026-15928 8.2

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
DEBIAN-CVE-2026-15928
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3384 8.2

xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML.

Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

Record
OESA-2026-3384
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
Show 23 moreShow less
OSVOESA-2026-3385 8.2

xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML.

Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

Record
OESA-2026-3385
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3386 8.2

xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML.

Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

Record
OESA-2026-3386
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3387 8.2

xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML.

Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

Record
OESA-2026-3387
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3426 8.2

xmlrpc-c security update

XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML.

Security Fix(es):

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.(CVE-2026-15928)

Record
OESA-2026-3426
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
OSVRHSA-2026:61231 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61231
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61232 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61232
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61233 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61233
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61234 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61234
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61235 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61235
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61236 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61236
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61315 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61315
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:61316 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:61316
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:64772 7.4

Red Hat Security Advisory: xmlrpc-c security update

Record
RHSA-2026:64772
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2026:61316 7.4

Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

  • xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61316
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2026:64772 7.4

Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

  • xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:64772
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2026-15928 8.2

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
UBUNTU-CVE-2026-15928
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Updated
2026-11-02
OSVALSA-2026:61316 No score

Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

  • xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:61316
Updated
2026-11-02
OSVALSA-2026:64772 No score

Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

  • xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:64772
Updated
2026-11-02
OSVAZL-94010 No score

CVE-2026-15928 affecting package xmlrpc-c 1.60.04-4

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

Record
AZL-94010
Updated
2026-11-02
OSVopenSUSE-SU-2026:11409-1 No score

libxmlrpc++9-1.64.03-2.1 on GA media

These are all security issues fixed in the libxmlrpc++9-1.64.03-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11409-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21633-1 No score

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue

  • CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component (bsc#1272769).
Record
openSUSE-SU-2026:21633-1
Updated
2026-11-02
OSVSUSE-SU-2026:23311-1 No score

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue

  • CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component (bsc#1272769).
Record
SUSE-SU-2026:23311-1
Updated
2026-11-02
OSVSUSE-SU-2026:3572-1 No score

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue:

  • CVE-2026-15928: reflected cross-site scripting (XSS) via HTML injection in the error page component (bsc#1272769).
Record
SUSE-SU-2026:3572-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xmlrpc-c
AlmaLinux:9
 before 1.51.0-17.el9_8
1.51.0-17.el9_8
xmlrpc-c-c++
AlmaLinux:9
 before 1.51.0-17.el9_8
1.51.0-17.el9_8
xmlrpc-c-client
AlmaLinux:9
 before 1.51.0-17.el9_8
1.51.0-17.el9_8
xmlrpc-c-client++
AlmaLinux:9
 before 1.51.0-17.el9_8
1.51.0-17.el9_8
xmlrpc-c-devel
AlmaLinux:9
 before 1.51.0-17.el9_8
1.51.0-17.el9_8
xmlrpc-c
AlmaLinux:8
 before 1.51.0-11.el8_10.1
1.51.0-11.el8_10.1
xmlrpc-c-c++
AlmaLinux:8
 before 1.51.0-11.el8_10.1
1.51.0-11.el8_10.1
xmlrpc-c-client
AlmaLinux:8
 before 1.51.0-11.el8_10.1
1.51.0-11.el8_10.1
xmlrpc-c-client++
AlmaLinux:8
 before 1.51.0-11.el8_10.1
1.51.0-11.el8_10.1
xmlrpc-c-devel
AlmaLinux:8
 before 1.51.0-11.el8_10.1
1.51.0-11.el8_10.1
Show 147 moreShow less
Affected packages
PackageAffectedFixed
xmlrpc-c
Azure Linux:3
 through 1.60.04-4 None known
xmlrpc-c
Debian:12
 All versions, plus listed versions
1.33.14-111.33.14-11.11.33.14-11.1~exp11.33.14-121.59.03-1
Show 11 moreShow less
1.59.03-101.59.03-10.11.59.03-21.59.03-31.59.03-41.59.03-51.59.03-61.59.03-71.59.03-81.59.03-91.60.05-1
 None known
xmlrpc-c
Debian:13
 All versions, plus listed versions
1.59.03-101.59.03-10.11.60.05-1
 None known
xmlrpc-c
Debian:14
 All versions, plus listed versions
1.59.03-101.59.03-10.11.60.05-1
 None known
xmlrpc-c
openEuler:24.03-LTS-SP3
 before 1.59.02-3.oe2403sp3
1.59.02-3.oe2403sp3
xmlrpc-c
openEuler:20.03-LTS-SP4
 before 1.51.06-3.oe2003sp4
1.51.06-3.oe2003sp4
xmlrpc-c
openEuler:22.03-LTS-SP4
 before 1.51.08-4.oe2203sp4
1.51.08-4.oe2203sp4
xmlrpc-c
openEuler:24.03-LTS-SP1
 before 1.59.02-3.oe2403sp1
1.59.02-3.oe2403sp1
xmlrpc-c
openEuler:24.03-LTS-SP4
 before 1.59.02-3.oe2403sp4
1.59.02-3.oe2403sp4
xmlrpc-c
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-client
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.51.0-16.el9_2.1
0:1.51.0-16.el9_2.1
xmlrpc-c
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-client
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c-debugsource
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.51.0-16.el9_4.1
0:1.51.0-16.el9_4.1
xmlrpc-c
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-apps-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-c++-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-client++-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-client
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-client-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-debugsource
Red Hat:rhel_aus:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-client
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c-debugsource
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:1.51.0-6.el8_6.2
0:1.51.0-6.el8_6.2
xmlrpc-c
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c-client
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c-debuginfo
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c-apps
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c-c++
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c-client++
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c-devel
Red Hat:rhel_els:7
 before 0:1.32.5-1905.svn2451.el7_9.1
0:1.32.5-1905.svn2451.el7_9.1
xmlrpc-c
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-apps-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-c++-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-client++-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-client
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-client-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-debugsource
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-apps-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-c++-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-client++-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-client
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-client-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c-debugsource
Red Hat:rhel_tus:8.8::baseos
 before 0:1.51.0-8.el8_8.2
0:1.51.0-8.el8_8.2
xmlrpc-c
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-apps-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-c++-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-client++-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-client
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-client-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-debugsource
Red Hat:rhel_aus:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-client
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.51.0-5.el8_4.3
0:1.51.0-5.el8_4.3
xmlrpc-c
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-client
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-apps-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-c++
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-c++-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-client++
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-client++-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-client-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-debugsource
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c-devel
Red Hat:rhel_eus:9.6::crb
 before 0:1.51.0-16.el9_6.1
0:1.51.0-16.el9_6.1
xmlrpc-c
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-apps-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-c++-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-client++-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-client
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-client-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-apps-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-c++
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-c++-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-client++
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-client++-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-client-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c-devel
Red Hat:enterprise_linux:9::crb
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-apps-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-c++-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-client++-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-client
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-client-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-apps-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-c++
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-c++-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-client++
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-client++-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-client-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c-devel
Red Hat:enterprise_linux:8::crb
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c
Rocky Linux:9
 before 0:1.51.0-17.el9_8
0:1.51.0-17.el9_8
xmlrpc-c
Rocky Linux:8
 before 0:1.51.0-11.el8_10.1
0:1.51.0-11.el8_10.1
xmlrpc-c
SUSE:Linux Enterprise Server 16.0
 before 1.54.06-160000.3.1
1.54.06-160000.3.1
xmlrpc-c
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.54.06-160000.3.1
1.54.06-160000.3.1
xmlrpc-c
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 1.51.07-150400.3.3.1
1.51.07-150400.3.3.1
xmlrpc-c
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 1.51.07-150400.3.3.1
1.51.07-150400.3.3.1
xmlrpc-c
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.16.33-3.2ubuntu31.33.06-0ubuntu11.33.06-0ubuntu1+esm1
 None known
xmlrpc-c
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.33.14-0.2ubuntu31.33.14-1ubuntu11.33.14-1ubuntu1+esm1
 None known
xmlrpc-c
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.33.14-71.33.14-81.33.14-8build11.33.14-8ubuntu0.18.04.1~esm1
 None known
xmlrpc-c
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.33.14-8build11.33.14-8build21.33.14-8ubuntu0.20.04.1~esm1
 None known
xmlrpc-c
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1.33.14-91.33.14-101.33.14-10ubuntu0.1~esm1
 None known
xmlrpc-c
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
1.33.14-111.33.14-11.11.33.14-121.33.14-12build11.33.14-12build21.33.14-12ubuntu0.1~esm1
 None known
xmlrpc-c
Ubuntu:26.10
 All versions, plus listed versions
1.60.05-11.60.05-1build1
 None known
xmlrpc-c
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.59.03-10.11.60.05-1
 None known
xmlrpc-c
openSUSE:Tumbleweed
 before 1.64.03-2.1
1.64.03-2.1
xmlrpc-c
openSUSE:Leap 16.0
 before 1.54.06-160000.3.1
1.54.06-160000.3.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-15928 is a high vulnerability (CVSS 8.2) in Xmlrpc-c, published July 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in xmlrpc-c 1.51.0-17.el9_8.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open