datAInsights CVE Current

CVE-2026-19614 — XML External Entity (XXE) Injection in CyberELF NanoXML

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Published: 2026-09-08 · CVSS: 5.3 · CVSS 4.0

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7