xxe
1 live · 5 on record · last incident 4 days ago
Live1
- live7.5Cisco BroadWorks CVE-2026-20320: Cisco BroadWorks XXE Vulnerability
Patch now · Exploited · Partly patched · since 10 Nov 2026 · updated 11 Nov 2026 · CVE-2026-20320
An improper restriction of XML external entity reference vulnerability in Cisco BroadWorks allows unauthenticated attackers to read sensitive configuration information. CISA confirmed exploitation in the wild and added the flaw to its KEV catalog.
Do:Apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.
Earlier4
- closed7.5LangChain family CVE-2025-6985: XML External Entity vulnerability in langchain-text-splitters
Patch now · Disclosed · since 6 Oct 2025 · CVE-2025-6985
AI - closed7.5LangChain family CVE-2025-6984: Langchain Community XML External Entity Vulnerability
Patch now · Disclosed · since 4 Sep 2025 · CVE-2025-6984
AI - closed8.2Guardrails AI CVE-2024-6961: Guardrails AI XXE vulnerability
Patch now · Disclosed · since 21 Jul 2024 · CVE-2024-6961
AI - closed5.9LangChain family CVE-2024-1455: LangChain XMLOutputParser vulnerable to XXE
Patch now · Disclosed · since 26 Mar 2024 · CVE-2024-1455
AI