Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-19614

XML External Entity (XXE) Injection in CyberELF NanoXML

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TCS-CERT

Description

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CyberELF NanoXML

Default version status: unaffected

  • 2.2.3affected

References