Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-89212

XML External Entity in Akana API Platform

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Perforce

Description

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Perforce Akana

Default version status: affected

  • 2024.1.6, 2025.1.2, 2026.2unaffected
  • All versions prior to 2024.1affected
  • 2024.1.0 to ≤ 2024.1.5affected
  • 2025.1.0 to ≤ 2025.1.1affected
  • 2026.1affected

References