https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:33:25.992854+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2776 CVE-2025-2776 — SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection 2026-10-08T04:33:26.008421+00:00

Affected: SysAid On-Prem

SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.