agentprime: XML external entities (XXE)Every new XML external entities (XXE) Advisory and CVE.https://agentprime.io/CVE-2026-81816: Apache OFBiz: XML external entity injection (XXE)https://agentprime.io/advisories/CVE-2026-81816/https://agentprime.io/advisories/CVE-2026-81816/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:06:35 GMTCVECVE-2026-123029: XML external entity injection in Wowza Streaming Enginehttps://agentprime.io/advisories/CVE-2026-123029/https://agentprime.io/advisories/CVE-2026-123029/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 06:45:37 GMTCVECVE-2026-13271: IBM MQ Managed File Transfer is affected by a denial of service vulnerabilityhttps://agentprime.io/advisories/CVE-2026-13271/https://agentprime.io/advisories/CVE-2026-13271/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:25:20 GMTCVECVE-2026-13284: IBM MQ Managed File Transfer is vulnerable to XML external entity injectionhttps://agentprime.io/advisories/CVE-2026-13284/https://agentprime.io/advisories/CVE-2026-13284/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:25:12 GMTCVECVE-2026-13289: IBM MQ Managed File Transfer is vulnerable to XML external entity injectionhttps://agentprime.io/advisories/CVE-2026-13289/https://agentprime.io/advisories/CVE-2026-13289/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:25:03 GMTCVECVE-2026-19721: XXE in TÜBİTAK BİLGEM's İmzagerhttps://agentprime.io/advisories/CVE-2026-19721/https://agentprime.io/advisories/CVE-2026-19721/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 08:12:53 GMTCVECVE-2026-92198: Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92198/https://agentprime.io/advisories/CVE-2026-92198/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:49 GMTCVECVE-2026-92185: Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92185/https://agentprime.io/advisories/CVE-2026-92185/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:31 GMTCVECVE-2026-114552: MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-114552/https://agentprime.io/advisories/CVE-2026-114552/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:47:50 GMTCVECVE-2026-93570: XML External Entity injection in Szafir and Szafir Weryfikującahttps://agentprime.io/advisories/CVE-2026-93570/https://agentprime.io/advisories/CVE-2026-93570/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:07:48 GMTCVECVE-2026-66090: XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Readhttps://agentprime.io/advisories/CVE-2026-66090/https://agentprime.io/advisories/CVE-2026-66090/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 01:37:37 GMTCVECVE-2026-66089: XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansionhttps://agentprime.io/advisories/CVE-2026-66089/https://agentprime.io/advisories/CVE-2026-66089/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 01:36:30 GMTCVECVE-2026-118039: XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processinghttps://agentprime.io/advisories/CVE-2026-118039/https://agentprime.io/advisories/CVE-2026-118039/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 12:29:35 GMTCVECVE-2026-112198: Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop Apphttps://agentprime.io/advisories/CVE-2026-112198/https://agentprime.io/advisories/CVE-2026-112198/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 10:20:06 GMTCVEPhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape Sequences Allows XXE and Denial of Servicehttps://agentprime.io/advisories/GHSA-3x94-m842-937c/https://agentprime.io/advisories/GHSA-3x94-m842-937c/phpoffice/phpspreadsheet <1.30.7 || >=2.0.0, <2.1.19 || >=2.2.0, <2.4.8 || >=3.3.0, <3.10.8 || >=4.0.0, <5.10.0, fixed in 1.30.7, 2.1.19, 2.4.8, 3.10.8, 5.10.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 15:38:28 GMTPackagistphpoffice/phpspreadsheetPhpSpreadsheet: XmlScanner Bypass via Double-Encoded unentity() TOCTOU Allows XXE and Denial of Servicehttps://agentprime.io/advisories/GHSA-rxj4-h86g-25gc/https://agentprime.io/advisories/GHSA-rxj4-h86g-25gc/phpoffice/phpspreadsheet >=3.3.0, <3.10.8 || >=4.0.0, <5.10.0, fixed in 3.10.8, 5.10.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 27 Oct 2026 15:38:22 GMTPackagistphpoffice/phpspreadsheetCVE-2026-90885: Apache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entit…https://agentprime.io/advisories/CVE-2026-90885/https://agentprime.io/advisories/CVE-2026-90885/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:47:03 GMTCVECVE-2026-54668: Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config)https://agentprime.io/advisories/CVE-2026-54668/https://agentprime.io/advisories/CVE-2026-54668/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 14:54:35 GMTCVECVE-2026-113582: Apache Abdera: XML external entity expansion in Atom document parsinghttps://agentprime.io/advisories/CVE-2026-113582/https://agentprime.io/advisories/CVE-2026-113582/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 13:27:11 GMTCVECVE-2026-97400: jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)https://agentprime.io/advisories/CVE-2026-97400/https://agentprime.io/advisories/CVE-2026-97400/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:08:17 GMTCVECVE-2026-91858: Apache Camel: Camel-FOP Resolves External DTDs and Entities From Untrusted XSL-FO Input When a Third-Party JAXP TransformerFactory Is Presenthttps://agentprime.io/advisories/CVE-2026-91858/https://agentprime.io/advisories/CVE-2026-91858/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:47:48 GMTCVECVE-2026-88901: Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by defaulthttps://agentprime.io/advisories/CVE-2026-88901/https://agentprime.io/advisories/CVE-2026-88901/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:44:07 GMTCVECVE-2026-85250: Apache Camel: Camel-XPath XML External Entity Processing and File Disclosure via the documentType=InputSource Optionhttps://agentprime.io/advisories/CVE-2026-85250/https://agentprime.io/advisories/CVE-2026-85250/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 10:35:21 GMTCVECVE-2026-104679: XML external entity injection in Yamaha Corporation VOCALOID6 Editorhttps://agentprime.io/advisories/CVE-2026-104679/https://agentprime.io/advisories/CVE-2026-104679/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 08:31:40 GMTCVECVE-2026-88794: XML External Entity injection in Sparx Enterprise Architecthttps://agentprime.io/advisories/CVE-2026-88794/https://agentprime.io/advisories/CVE-2026-88794/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 12:24:54 GMTCVECVE-2026-109430: Ellucian WebAdvisor 3.2 Unauthenticated XXE Injectionhttps://agentprime.io/advisories/CVE-2026-109430/https://agentprime.io/advisories/CVE-2026-109430/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 01:31:06 GMTCVECVE-2026-106616: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2026-106616/https://agentprime.io/advisories/CVE-2026-106616/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 20:21:44 GMTCVECVE-2026-90531: Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2026-90531/https://agentprime.io/advisories/CVE-2026-90531/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 19:39:00 GMTCVEcriticalCVE-2026-77090: CVFS Information Disclosurehttps://agentprime.io/advisories/CVE-2026-77090/https://agentprime.io/advisories/CVE-2026-77090/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 14:26:59 GMTCVECVE-2026-93891: Security Vulnerability identified in IBM TRIRIGA - XXEhttps://agentprime.io/advisories/CVE-2026-93891/https://agentprime.io/advisories/CVE-2026-93891/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:48:57 GMTCVECVE-2026-85970: Improper XML external entity restriction in Progress MarkLogic Serverhttps://agentprime.io/advisories/CVE-2026-85970/https://agentprime.io/advisories/CVE-2026-85970/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:39:27 GMTCVECVE-2026-85957: Improper XML external entity restriction in Progress MarkLogic Server SAML processinghttps://agentprime.io/advisories/CVE-2026-85957/https://agentprime.io/advisories/CVE-2026-85957/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:01:34 GMTCVECVE-2026-92877: XML external entity injection in Eclipse Foundation jaxb-ri (core)https://agentprime.io/advisories/CVE-2026-92877/https://agentprime.io/advisories/CVE-2026-92877/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 14:19:28 GMTCVECVE-2026-14905: IBM DataPower Gateway XXEhttps://agentprime.io/advisories/CVE-2026-14905/https://agentprime.io/advisories/CVE-2026-14905/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:02:02 GMTCVECVE-2026-102155: Security Advisory 0190https://agentprime.io/advisories/CVE-2026-102155/https://agentprime.io/advisories/CVE-2026-102155/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 19:39:52 GMTCVECVE-2026-101893: Newell Brands DYMO ID document parsing failing file type extension authentication checkhttps://agentprime.io/advisories/CVE-2026-101893/https://agentprime.io/advisories/CVE-2026-101893/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 20:36:21 GMTCVECopernik XML Factory (stock JDK provider) has Improper restriction of XInclude resource resolutionhttps://agentprime.io/advisories/GHSA-xm28-xvqc-gxxg/https://agentprime.io/advisories/GHSA-xm28-xvqc-gxxg/eu.copernik:copernik-xml-factory <0.1.2, fixed in 0.1.2. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Fri, 02 Oct 2026 18:27:17 GMTMaveneu.copernik:copernik-xml-factoryCVE-2026-88789: Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardeninghttps://agentprime.io/advisories/CVE-2026-88789/https://agentprime.io/advisories/CVE-2026-88789/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:51:22 GMTCVECVE-2026-102127: Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Referencehttps://agentprime.io/advisories/CVE-2026-102127/https://agentprime.io/advisories/CVE-2026-102127/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:14:56 GMTCVECVE-2026-82376: Apache Roller: XML external entity processing in trackback response parserhttps://agentprime.io/advisories/CVE-2026-82376/https://agentprime.io/advisories/CVE-2026-82376/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:46:10 GMTCVECVE-2026-82386: Apache Roller: XML external entity processing in OPML bookmark importhttps://agentprime.io/advisories/CVE-2026-82386/https://agentprime.io/advisories/CVE-2026-82386/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 07:43:31 GMTCVECVE-2026-93030: XML external entity injection in IBM Financial Transaction Manager (FTM) for Redhat OpenShifthttps://agentprime.io/advisories/CVE-2026-93030/https://agentprime.io/advisories/CVE-2026-93030/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 14:32:52 GMTCVEhttp4s-scala-xml has an XML External Entity (XXE) processing issuehttps://agentprime.io/advisories/GHSA-cjx3-73hr-rpw7/https://agentprime.io/advisories/GHSA-cjx3-73hr-rpw7/org.http4s:http4s-scala-xml_2.12 <0.24.1, fixed in 0.24.1. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:35:16 GMTMavenorg.http4s:http4s-scala-xml_2.12org.http4s:http4s-scala-xml_2.13org.http4s:http4s-scala-xml_3criticalCVE-2026-81536: DataStage on Cloud Pak for Data has several vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-81536/https://agentprime.io/advisories/CVE-2026-81536/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 21:38:08 GMTCVECVE-2026-18184: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-18184/https://agentprime.io/advisories/CVE-2026-18184/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 15:43:57 GMTCVECVE-2026-18172: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-18172/https://agentprime.io/advisories/CVE-2026-18172/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 22:16:27 GMTCVECVE-2026-17646: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-17646/https://agentprime.io/advisories/CVE-2026-17646/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 21:42:56 GMTCVEMPXJ: XXE Vulnerability in MerlinReaderhttps://agentprime.io/advisories/GHSA-5vvx-3h34-f3gj/https://agentprime.io/advisories/GHSA-5vvx-3h34-f3gj/net.sf.mpxj:mpxj >=5.5.5, <16.4.1, fixed in 16.4.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:34:25 GMTMavennet.sf.mpxj:mpxjNuGetMPXJ.Netnet.sf.mpxjnet.sf.mpxj-for-csharpnet.sf.mpxj-for-vbPyPImpxjRubyGemsCVE-2026-94108: getID3 through 1.9.26 XML External Entity Injection via XML2arrayhttps://agentprime.io/advisories/CVE-2026-94108/https://agentprime.io/advisories/CVE-2026-94108/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Sep 2026 11:09:41 GMTCVECVE-2026-76427: Cisco ISE XML External Entity Injection Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-76427/https://agentprime.io/advisories/CVE-2026-76427/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:24:45 GMTCVE