CVE-2026-16626 — Joshua Nichols

Description

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.

References

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-august-05-2026-jasperreports-server-cve-2026-16626-r12/

Published: Aug 10, 2026 18:17 UTC Modified: Aug 11, 2026 16:17 UTC