CVEvulnerability

CVE-2026-6807

5.5 MEDIUM Published 2026-04-28 Modified 2026-10-26 Official page ↗

Status: Awaiting Analysis
Published: 2026-04-28
Last modified: 2026-10-26
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-611

Description

A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information. The flaw stems from insufficient hardening of the XML parsing process.

Weakness · CWE (1)

CWE-611 Improper Restriction of XML External Entity Reference weakness

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-118-01.json github.com
https://www.cisa.gov/news-events/ics-advisories/icsa-26-118-01 www.cisa.gov

CVE-2026-6807

Description

Related

Weakness · CWE (1)

References