CVE Intelligence

CyberELF vulnerabilities

🔔 Create alert RSS

Published CVEs affecting CyberELF products: 1 record(s), with severity, exploitation and fixes.

NanoXML 1

Exploited only (KEV) →

CVE-2026-19614 Medium · 5.3 CWE-611 Sep 8, 2026
XML External Entity (XXE) Injection in CyberELF NanoXML
The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.