CVE-2026-92001: Apache Sling XSS: Missing parser resource limits
Apache Sling XSS before 2.4.12 has an XML entity expansion vulnerability (CVE-2026-92001).
40
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 11, 2026
- Last mentionedSep 23, 2026
Timeline
4 articles · newest firstRyuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
A Ryuk ransomware operator was sentenced to 2 years in prison for extorting over $1.2 million from victims.
65
Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
An Armenian Ryuk operator received a two-year U.S. prison sentence and $1.2 million in victim restitution.
60
Conti ransomware gang member sentenced to 4 years in prison
US court sentences Ukrainian Conti ransomware member Oleksii Lytvynenko to four years; the gang extorted over $150M from 1,000+ victims.
35
Related CVEs
by mentions- XML Entity Expansion Flaw in Apache Sling XSS Library Before 2.4.12
Appears with
- FBIorganization · 4
- Trickbotmalware · 3
- Ryukmalware · 3
- Universal Health Servicesvictim · 3
- GPT-6 Astraai model · 1
- DOJorganization · 1
- FBIvendor · 1
- Black Bastathreat actor · 1
- TrickBotthreat actor · 1
- Apache Software Foundationorganization · 1
- U.S. Department of Justiceorganization · 1
- US Department of Justiceorganization · 1
- Universal Health Servicesorganization · 1
- Contithreat actor · 1
- Karen Vardanyanthreat actor · 1
- Apachevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.