Back to the CVE list

CVE-2025-40934

Vulnerability in Xml\

CVSS score

9.3

EPSS probability

%0.2

Risk score

0.0

Published

10 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.1

CVE-2026-9390XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup

VendorTIMLEGGE ProductXML::Sig+2 etkilenen

Patch verifiedEPSS %12 mo ago

9.1

CVE-2026-9487XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID

VendorTIMLEGGE ProductXML::Sig+2 etkilenen

Patch verifiedEPSS %02 mo ago

7.5

CVE-2026-18568XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check

VendorTIMLEGGE ProductXML::Sig+2 etkilenen

Patch verifiedEPSS %02 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-40934"