Lucene search
+L

52 matches found

NVD
NVD
•added 2026/09/11 2:17 p.m.•13 views

CVE-2026-89212

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

9.2CVSS0.0044EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/11 1:23 p.m.•13 views

CVE-2026-89212 XML External Entity in Akana API Platform

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

9.2CVSS5.4AI score0.0044EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/11 1:23 p.m.•18 views

EUVD-2026-76103

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

9.2CVSS5.4AI score0.0044EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/11 1:23 p.m.•42 views

CVE-2026-89212 XML External Entity in Akana API Platform

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

9.2CVSS0.0044EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/11 1:23 p.m.•25 views

CVE-2026-89212

Akana API Platform contains an XML External Entity (XXE) vulnerability in its XML-to-JSON processing component, where external entity references were improperly restricted. This allows a remote, unauthenticated attacker to exploit the flaw over the network with low complexity, resulting in high c...

9.2CVSS5.4AI score0.0044EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•12 views

PT-2026-89868

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

9.2CVSS5.4AI score0.0044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•1 views

CVE-2026-89212: Improper Restriction of XML External Entity Reference

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...

9.2CVSS5.6AI score0.0044EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/09 11:17 a.m.•7 views

CVE-2026-85978

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

10CVSS0.01439EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 10:31 a.m.•18 views

EUVD-2026-74794

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

10CVSS6.8AI score0.01439EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 10:31 a.m.•29 views

CVE-2026-85978

CVE-2026-85978 is a CRITICAL (CVSS 4.0: 10.0) unauthenticated remote code execution vulnerability in the Policy Manager console of Akana API Platform . A path normalization discrepancy between the authentication filter and the servlet dispatcher allows an attacker to craft a request that bypasses...

10CVSS6.8AI score0.01439EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 10:31 a.m.•37 views

CVE-2026-85978 Unauthenticated Remote Code Execution in Akana API Platform

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

10CVSS0.01439EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 10:31 a.m.•12 views

CVE-2026-85978 Unauthenticated Remote Code Execution in Akana API Platform

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

10CVSS6.8AI score0.01439EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-85978: Improper Control of Generation of Code

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

10CVSS6.7AI score0.01439EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•14 views

PT-2026-88937

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

10CVSS6.8AI score0.01439EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-46488

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00305EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-47149

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00219EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-27740

Malicious code in bioql PyPI...

9.3CVSS6.6AI score0.0044EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-32396

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00337EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-32497

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:59 a.m.•14 views

CVE-2024-5249

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed...

7.5CVSS7.1AI score0.00219EPSS
SaveExploits0References1
Rows per page
Query Builder