CRITICAL 9.2 NVD

CVE-2026-89212

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.

References

https://portal.perforce.com/s/cve/a91Qi000003CxPBIA0/xml-external-entity-in-akana-api-plat

Published: 2026-09-11 · Source: NVD · Feed updated: 2026-09-11

This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-09-11 via NVD.

Risk Timeline

CVE Disclosed2026-09-11 · -1 days ago

Remediation Resources

Official Advisory

portal.perforce.com/s/cve/a91Qi000003CxPBIA0/xml-external-entity-in-ak

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.