CVE-2026-56404 libexpat before 2.8.2 has an integer overflow in addBinding. Information published. EPSS 0.00 CVE-2026-56404 US Microsoft Security · 27. 6. 10:05