CVE-2026-2252 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious extern…
High CVSS: 7.5

CVE-2026-2252

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references.

This issue affects Xerox FreeFlow Core versions up to and including 8.0.7. 

Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on -  https://www.support.xerox.com/en-us/product/core/downloads
Vendor
Xerox
Product
Freeflow Core
CWE
CWE-611
Yayın Tarihi
2026-02-27 09:16:17
Güncelleme
2026-03-02 18:24:05
Source Identifier
10b61619-3869-496c-8a1e-f291b0e71e3f
KEV Date Added
-

Kategoriler

Referanslar