VULNERABILITY INTELLIGENCE

CVE-2026-28638

CVSS score3.3 LOW

EPSS probability0.09%

CISA KEVNot currently listed

Published2026-09-08

Last modified2026-09-15

Description

In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.