CVE-2026-8396CWE-611

XXE in Netcad's NetGIS

High · published July 17, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Data External Linking.

This issue affects NetGIS: from 5.0.66 before 7.2.2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2026-07-17T12:20Z
EPSS history
Timeline
  • 17 JUL 12:20Z
    XXE in Netcad's NetGIS
    cvelistv5