SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-19614

MEDIUM · CVSS 5.3 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability allows for XML external entity (XXE) injection in NanoXML version 2.2.3, which can lead to unauthorized access to sensitive data or denial of service through crafted XML input. Organizations using this version of NanoXML should prioritize remediation to mitigate potential exploitation risks associated with this medium-severity issue.

CVE
CVE-2026-19614
Severity
MEDIUM
CVSS
5.3
EPSS
0.23%

Original NVD Description

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.