CyberELF vulnerabilities

Products

• NanoXML 1

Latest CyberELF CVEs

Newest publication first

1. CVE-2026-19614 XML External Entity (XXE) Injection in CyberELF NanoXML

   Published 2026-09-08

   Medium·CVSS 5.3 EPSS 0.39%

   The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.