LinkScope_Client

LinkScope Client Installer Download Get the installer for LinkScope Client from here: https://accentusoft.com/downloads/ Description This is the repository for the LinkScope Client Online Investigation software. LinkScope allows you to perform online investigations by representing information as...

CVE-2026-11112-XXE-via-SVG-Image-Upload

CVE-2026-11112 – XXE via SVG Image Upload Program Code Python Flask + XML parser xxeuploadserver.py - Uploads SVG, renders with lxml resolving entities from flask import Flask, request from lxml import etree app = Flaskname @app.route'/upload', methods='POST' def uploadsvg: svgdata = request.data...

CVE-2026-109798

SAP BusinessObjects Business Intelligence Platform Web Intelligence does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, enabling them to read sensitive files on t...

CVE-2026-109798

The SAP BusinessObjects Business Intelligence Platform (Web Intelligence) component is vulnerable to an XML External Entity (XXE) issue. The root cause is the improper restriction of external entity resolution when the platform processes OLAP connection requests . An authenticated attacker can ex...

EUVD-2026-120682

SAP BusinessObjects Business Intelligence Platform Web Intelligence does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, enabling them to read sensitive files on t...

CVE-2026-109798: SAP_SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence): SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity…

SAP BusinessObjects Business Intelligence Platform Web Intelligence does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, enabling them to read sensitive files on t...

PT-2026-141246

SAP BusinessObjects Business Intelligence Platform Web Intelligence does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, enabling them to read sensitive files on t...

CVE-2026-118468 AIS XML parsers allow external entity resolution

XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity XXE attacks...

EUVD-2026-120028

XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity XXE attacks...

VulnCheck KEV: CVE-2026-20320

Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system...

CLEANSTART-2026-OV77491 Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity r...

CVE-2026-49875 affects multiple packages. Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band OOB external entity resolution. See references for individual vulnerability detail...

Security Bulletin: IBM MQ console is vulnerable to an External Entity Reference vulnerability (CVE-2026-49875)

Summary IBM MQ console has addressed an External Entity Reference vulnerability in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-49875 DESCRIPTION: Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the...

Astra Linux – vulnerability in lxml

Lxml is a library for processing XML and HTML in Python. Prior to version 6.1.0, using either of the two parsers with the default configuration with resolveentities=True allowed untrusted XML input to read local files. Setting the resolveentities option explicitly to resolveentities='internal' or...

CVE-2026-54640

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/protocol/knx/KNXProtocol.java processes 0.xml from an authenticated user's uploaded ETS project ZIP with Saxon TransformerFactoryImpl and...

EUVD-2026-98841

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/protocol/knx/KNXProtocol.java processes 0.xml from an authenticated user's uploaded ETS project ZIP with Saxon TransformerFactoryImpl and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxml2 (UTSA-2026-123925)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-123925 advisory. Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously...

CVE-2026-76427 Cisco ISE XML External Entity Injection Vulnerability

A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable...

PT-2026-94028

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description An issue in the offline profiler feed service allows an authenticated remote attacker to read arbitrary files from the file system and send requests to internal systems. This occurs because...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details CVEID:CVE-2026-49875 DESCRIPTION: Apache CXF's...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection in the xmlXIncludeProcess or xmlXIncludeProcessTree functions when parseFlags such as XMLPARSENONET are not properly propagated. An attacker can access external internet resources, disclose sensitive...