CVE-2026-126627

Description

Creation of Temporary File With Insecure Permissions vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: through 2.11. Users are recommended to upgrade to version 2.12, which fixes the issue.

References

https://lists.apache.org/thread.html/f8mys56y18wjmp1wzg4qmx6hhyjxgo0f

https://issues.apache.org/jira/browse/FOP-3284

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123361

http://www.openwall.com/lists/oss-security/2026/11/11/15

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS