CyberELF NanoXML vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting CyberELF NanoXML: 1 record(s), with affected versions and fixes.

CVE-2026-19614 Medium · 5.3 CWE-611 Sep 8, 2026

XML External Entity (XXE) Injection in CyberELF NanoXML

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.