CVE-2025-66516 - Vulnerability Details

Related Threat Clusters

• Apache Tika Faces Critical XXE Vulnerability CVE-2025-66516

  A critical vulnerability, CVE-2025-66516, has been identified in Apache Tika, allowing for XML external entity (XXE) injection attacks. This vulnerability poses significant risks to users of Apache Tika, necessitating…

  10 articles · Updated December 6, 2025
• Oracle Releases January 2026 Critical Patch Update Addressing 337 Vulnerabilities

  On January 20, 2026, Oracle released its Critical Patch Update (CPU) for January 2026, addressing 337 security vulnerabilities across 122 products. This update includes fixes for 158 unique CVEs, with 27 patches…

  8 articles · Updated January 21, 2026
• Apache Tika Toolkit Faces Critical 10.0-Rated Vulnerability

  The Apache Foundation has issued a warning regarding a critical 10.0-rated vulnerability in its Tika toolkit, which is used for metadata extraction from over 1,000 file formats. This follows a previously reported…

  2 articles · Updated December 8, 2025

Recent Intelligence Reports

• Oracle January 2026 CPU Delivers 337 Security Patches Including CVE-2025-66516 ... — Socradar · January 22, 2026
• Oracle releases 337 security patches, including fix for critical Apache Tika flaw — Csoonline · January 21, 2026
• Oracle Critical Security Patch — Cybersecuritynews · January 21, 2026
• Apache warns of 10.0-rated flaw in Tika metadata ingestion tool — Theregister · December 8, 2025
• Apache warns of 10.0 — Theregister · December 8, 2025
• Apache Tika Vulnerability CVE-2025-66516: Critical XXE Attack Risk — Redhotcyber · December 6, 2025
• Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch — Thehackernews · December 5, 2025

Related Entities