CVE-2025-66516

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 5, 2025

Last Seen

January 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Apache Tika Faces Critical XXE Vulnerability CVE-2025-6651662.1

A critical vulnerability, CVE-2025-66516, has been identified in Apache Tika, allowing for XML external entity (XXE) injection attacks. This vulnerability poses significant risks to users of Apache Tika, necessitating urgent patching to mitigate potential exploits.

Oracle Releases January 2026 Critical Patch Update Addressing 337 Vulnerabilities50.8

On January 20, 2026, Oracle released its Critical Patch Update (CPU) for January 2026, addressing 337 security vulnerabilities across 122 products. This update includes fixes for 158 unique CVEs, with 27 patches classified as critical, impacting various Oracle product families such as databases and...

Apache Tika Toolkit Faces Critical 10.0-Rated Vulnerability34.2

The Apache Foundation has issued a warning regarding a critical 10.0-rated vulnerability in its Tika toolkit, which is used for metadata extraction from over 1,000 file formats. This follows a previously reported 8.4-rated flaw (CVE-2025-54988) that allowed XML External Entity injection via crafted...