CVE-2026-113582: Apache Abdera XML External Entity (XXE) Vulnerabilities

2026-10-24

During research at Addepar, I discovered XML External Entity (XXE) vulnerabilities in the Apache Abdera library. All versions of the library are affected. I reported the vulnerablities to Apache Security who allocated and published CVE-2026-113582 for tracking. The severity is rated 8.7 (high) per CVSS 4.0.

Abdera is an open source Atom implementation. The project has been unmaintained since February 2017. No patches will be provided.

Blog Posts

  1. CVE-2026-113582: Apache Abdera XML External Entity (XXE) Vulnerabilities (2026-10-24)
  2. Bringing TEE-Mediated Private AI to Linux with TPM-Backed Passkeys (2026-02-21)
  3. Sandboxing Applications on Linux: Securing Password Managers with Firejail (2026-02-07)
  4. Running Tailscale in a Container (2026-01-25)
  5. Running dnscrypt-proxy in a Container (2026-01-17)
  6. Proxying Applications Without Native SOCKS Support (2026-01-11)
  7. Running a SOCKS Proxy for the Tor Onion Network in a Container (2026-01-05)
  8. Running OpenSSH Client as a SOCKS Proxy in a Container (2026-01-04)
  9. Adding Poe AI Support to Roo Code (2025-11-23)
  10. Introducing Edi: A CLI Tool for Interacting with the Poe API (2025-09-14)
  11. Deriving the Sum of Powers Formula (2025-08-03)
  12. Scheduling Color Temperature Changes for Your Monitors (2025-06-07)
  13. Stream and Play: Emulating Retro Games on Chromecast with Google TV (2025-05-10)
  14. Simulating the Monty Hall Problem (2025-05-04)
  15. Pi-hole on Raspberry Pi OS with dnscrypt-proxy (2024-01-28)
  16. Prime or Not Prime: That is the Question (2023-07-22)
  17. Switching Monitor Inputs on Computer Wakeup (2021-04-25)
  18. Changing the Playback Speed on Spotify's Web Player (2021-04-24)
  19. Solving Microcorruption Hollywood (2021-03-28)
  20. Font Rendering on macOS (2020-07-02)
  21. Video Disk Recorder (VDR) Tooling (2020-05-30)
  22. Spotify Web Player Failure due to Crash of Connected Device (2020-05-08)
  23. Malicious Forward Proxies (2020-04-27)
  24. Switching to a Dark Theme (2020-04-25)
  25. USB 3.0 to Gigabit Ethernet Adapter with Realtek 8153 Chipset on macOS Catalina (2020-04-23)
  26. Backing up Emails using OfflineIMAP (2020-04-19)
  27. Using a Raspberry Pi as a Wireless Access Point (2020-04-18)
  28. Accessing External Hard Drives in a Virtual Machine (2017-12-11)
  29. Managing Clipboards (2016-11-23)
  30. Multi-Screen Configuration Using Xrandr (2016-07-02)
  31. Email Backup and Migration using Thunderbird (2016-06-29)
  32. Automatic SSH Proxy Selection (2016-02-08)
  33. Set Color Temperature (2015-11-25)
  34. Completion Methods in Vim (2015-10-10)
  35. Fuzzing the mbed TLS Library (2015-09-26)
  36. SSH Weak Diffie-Hellman Group Identification Tool (2015-08-12)
  37. Building a Standing Desk for 50 Bucks (2015-01-25)
  38. High-DPI Displays under Linux (2014-12-23)
  39. Slow Wi-Fi on the Raspberry Pi (2014-06-15)
  40. XBMC on the Raspberry Pi (2014-06-14)
  41. Turning the Raspberry Pi into a Game Console (2014-06-12)
  42. ZFS Backups to External Hard Drives (2014-03-23)
  43. Display the I/O Usage of a Process (2014-02-21)
  44. Determining Wireless Network Channel Usage (2014-02-09)
  45. Managing Web Files through a Repository (2013-08-17)
  46. Simple HTTP File Servers (2013-08-16)
  47. Protect your SSH Private Keys (2013-06-16)
  48. Forward Secrecy for HTTPS and Ephemeral Diffie-Hellman (2013-06-14)
  49. Markdown Preview Chrome Extension (2013-06-13)