7 matches found
CVE-2026-82525
Exterro FTK Imager before 8.3 contains an XML external entity XXE injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP...
CVE-2026-82525
Exterro FTK Imager before 8.3 is affected by an XML External Entity (XXE) injection vulnerability in the processing of Report.xml within UFDR ZIP evidence items. The root cause is the XML parser resolving file:// external entity references and executing msxsl:script within attacker-controlled XSL...
EUVD-2026-70521
Exterro FTK Imager before 8.3 contains an XML external entity XXE injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP...
CVE-2026-82525 Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing
Exterro FTK Imager before 8.3 contains an XML external entity XXE injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP...
CVE-2026-82525 Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing
Exterro FTK Imager before 8.3 contains an XML external entity XXE injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP...
PT-2026-85065
Name of the Vulnerable Software and Affected Versions Exterro FTK Imager versions prior to 8.3 Description An XML external entity XXE injection exists where attackers can read arbitrary files from the host filesystem. This is achieved by embedding malicious external entity references and...
CVE-2026-82525: Improper Restriction of XML External Entity Reference
Exterro FTK Imager before 8.3 contains an XML external entity XXE injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP...