CVE-2026-77090CWE-611xxe
CVE-2026-77090
published October 13, 2026
What it is
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
The record
Technical detail
- CVSS
- 8.7 · NONE
- CVSS v4.0
- 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00330 · 24.9th percentile
- Weakness
- CWE-611 · Improper Restriction of XML External Entity Reference
- Published
- 2026-10-13T19:17Z
References (1)
EPSS history
Timeline