Skip to content
Saturday, August 22, 2026
KAJ NEWSCYBER · PRIVACY · SECURITY

CVE-2026-76956

The CVE Severity Digest turns the National Vulnerability Database feed into a prioritized security briefing. It groups affected software into practical product families, distinguishes patch and mitigation references from general citations, and ranks the vulnerabilities most likely to matter to technology operators while preserving direct links to the official record.

Records
199
Last changed
Update schedule
17 6 * * * UTC
Coverage
08/15/2026–08/22/2026
Method
Methodology
CVE
CVE-2026-76956
Description
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.
Published
08/20/2026
Severity
HIGH
CVSS
7.5
Priority score
70.494