CVE-2026-112181

The OpenKM Community Edition software is vulnerable to an XML External Entity (XXE) flaw due to inadequate restriction of external references in the FormUtils / LocalEntityResolver component. An authenticated remote attacker with the ROLE_USER role can exploit this via a REST request. In the 6.3....