CVE-2026-16626

An improper restriction of XML external entity (XXE) vulnerability in Jaspersoft JasperReports Server allows unauthenticated attackers to exploit XML processing features, potentially leading to sensitive data exposure or server-side request forgery. Organizations using affected versions (9.0.0 before HF-9 and 10.0.0 before HF-10) should prioritize patching this critical vulnerability to mitigate the risk of data breaches and unauthorized access.