The vulnerability of the EcoStruxure IT Data Center Expert software in managing data center infrastructure lies in the improper limitation of XML references to external objects, which allows attackers to disclose sensitive information.

The vulnerability of the EcoStruxure IT Data Center Expert software for managing data center infrastructure is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

CVE-2026-56411

xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...

CVE-2026-12788 zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity reference

A vulnerability was determined in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /adpweb/a/base/barcodeDetail/import of the component XML Parser. This manipulation causes xml external entity reference. It is possible to...

PT-2026-51206

A vulnerability was determined in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /adpweb/a/base/barcodeDetail/import of the component XML Parser. This manipulation causes xml external entity reference. It is possible to...

The vulnerability of SAML authentication in SAP NetWeaver AS ABAP and SAP NetWeaver ABAP software integration platforms allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of SAML authentication in SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...

The vulnerability of the ColdFusion interpreter arises from incorrect restrictions on XML references to external objects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows UEFI boot interface of Windows operating systems allows a hacker to bypass existing security mechanisms.

The vulnerability of the Windows UEFI boot interface in operating systems involves a violation of data protection mechanisms. Exploiting this vulnerability can allow attackers to bypass existing security measures...

EUVD-2026-32912

pypdf: Manipulated XMP metadata streams can exhaust RAM...

Arista Networks EOS Tunnel Decapsulation Improper Validation (SA0137)

On affected platforms running Arista EOS where a tunnel decapsulation configuration - such as VXLAN Virtual Extensible LAN, decap-groups, or a GRE Generic Routing Encapsulation tunnel interface - is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packets wit...

guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator

Impact guzzlehttp/guzzle-services does not safely serialize scalar XML element values containing the CDATA terminator . The XML request serializer writes values containing , or & with XMLWriter::writeCData$value. If attacker-controlled input contains , the CDATA section closes early and the...

CVE-2026-53723 guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator

Guzzle Services provides an implementation of the Guzzle Command library that uses Guzzle service descriptions to describe web services, serialize requests, and parse responses into easy to use model structures. Versions prior ro 1.5.4 do not safely serialize scalar XML element values containing...

The vulnerability of the VXLAN (Virtual Extensible LAN) and GRE (Generic Routing Encapsulation) encapsulation configuration of the Arist EOS operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the VXLAN Virtual Extensible LAN and GRE Generic Routing Encapsulation encapsulation configuration of the Arist EOS operating system lies in the comparison of objects without considering their characteristics. Exploiting this vulnerability allows a remote attacker to compromi...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0874

Updates of 'libxml2', 'openssl' packages of Photon OS have been released...

CVE-2026-45656

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally...

CVE-2026-8045

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints...

CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability

...

Qualcomm Fastboot UEFI Vulnerabilities - Lenovo Support US

No description provided...

SUSE-SU-2026:2324-1 Security update for perl-XML-LibXML

This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences bsc1264715...

Schneider Electric Data Center Expert 代码问题漏洞

Schneider Electric Data Center Expert is a data monitoring software developed by Schneider Electric, a multinational technology company. Schneider Electric Data Center Expert has a code vulnerability caused by improper restrictions on XML external entity references. This vulnerability could allow...

A Bayesian Network Approach for Enhancing Security-Focused Decision Support Systems

The adoption and integration of heterogeneous stacks in most of today's open-source based networks brings clear benefits like interoperability and availability of advanced features. Yet, on the other hand the increasing number of interconnecting components and moving parts requires maintaining an...