7 CVEs — updated 2026-11-03 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-112198 | XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The applicatio | HIGH | 8.3 | 5%ile | NVD | 2026-10-28 |
| CVE-2026-93570 | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf | HIGH | 8.2 | 20%ile | NVD | 2026-10-29 |
| CVE-2026-61586 | Copernik XML Factory provides secure-by-default JAXP factory creation for Java. Prior to 0.1.2, Copernik XML Factory doe | HIGH | 8.2 | 30%ile | NVD | 2026-10-30 |
| CVE-2026-118039 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulne | HIGH | 7.5 | 19%ile | NVD | 2026-10-28 |
| CVE-2026-66090 | In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user | HIGH | 7.1 | 19%ile | NVD | 2026-10-29 |
| CVE-2026-66089 | In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves ext | MEDIUM | 6.1 | 19%ile | NVD | 2026-10-29 |
| CVE-2026-119724 | CVE-2026-119724: Apache JClouds: XML External Entity (XXE) in provider-response parsing | UNKNOWN | — | — | OSS-Security | 2026-11-02 |