{"id":"CVE-2026-57917","state":"PUBLISHED","title":"Improper Restriction of XML External Entity Reference in proCertum SmartSign","description":"proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity (XXE) vulnerability is triggered simply by previewing a file in the file selection window, before the victim clicks “Open”.\n\nThis issue was fixed in version 9.4.3.90.","publishedAt":"2026-07-27T10:29:31.529Z","updatedAt":"2026-07-27T14:41:24.317Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","source":"CERT-PL"},"assigner":"CERT-PL","products":["Asseco proCertum SmartSign"],"affected":[{"vendor":"Asseco","product":"proCertum SmartSign","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"9.4.3.90","versionType":"semver"}]}],"references":["https://cert.pl/posts/2026/07/CVE-2026-57916","https://pomoc.certum.pl/pl/oprogramowanie/procertum-smartsign/"],"weaknesses":["CWE-611"],"ingestedAt":"2026-10-29T20:12:24.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/57xxx/CVE-2026-57917.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-57917","state":"PUBLISHED","datePublished":"2026-07-27T10:29:31.529Z","dateUpdated":"2026-07-27T14:41:24.317Z","assignerShortName":"CERT-PL","assignerOrgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","dateReserved":"2026-06-26T10:47:10.593Z"},"containers":{"cna":{"title":"Improper Restriction of XML External Entity Reference in proCertum SmartSign","descriptions":[{"lang":"en","value":"proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity (XXE) vulnerability is triggered simply by previewing a file in the file selection window, before the victim clicks “Open”.\n\nThis issue was fixed in version 9.4.3.90."}],"affected":[{"vendor":"Asseco","product":"proCertum SmartSign","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"9.4.3.90","versionType":"semver"}]}],"references":[{"url":"https://cert.pl/posts/2026/07/CVE-2026-57916","tags":["third-party-advisory"]},{"url":"https://pomoc.certum.pl/pl/oprogramowanie/procertum-smartsign/","tags":["product"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","subIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-611","lang":"en","description":"CWE-611 Improper Restriction of XML External Entity Reference","type":"CWE"}]}],"providerMetadata":{"shortName":"CERT-PL","orgId":"4bb8329e-dd38-46c1-aafb-9bf32bcb93c6","dateUpdated":"2026-07-27T10:29:31.529Z"},"impacts":[{"capecId":"CAPEC-664","descriptions":[{"lang":"en","value":"CAPEC-664 Server Side Request Forgery"}]}],"credits":[{"lang":"en","value":"Mariusz Maik","type":"finder"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-07-27T14:41:16.715293Z","id":"CVE-2026-57917","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-27T14:41:24.317Z"}}]}}}