https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:07:47.821057+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274761 EUVD-2026-274761 2026-10-02T12:07:47.881354+00:00 EUVD-2026-274761 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2252 fkie_cve-2026-2252 2026-10-02T12:07:47.881389+00:00

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references.

This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.

Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on -  https://www.support.xerox.com/en-us/product/core/downloads

 https://cve.radiocsirt.org/vuln/ghsa-cfm2-f46f-rc3g GHSA-cfm2-f46f-rc3g 2026-10-02T12:07:47.881426+00:00

An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external entity references.

This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.

Please consider upgrading to FreeFlow Core version 8.1.0 via the software available on -  https://www.support.xerox.com/en-us/product/core/downloads

 https://cve.radiocsirt.org/vuln/jvndb-2026-007973 jvndb-2026-007973 2026-10-02T12:07:47.881445+00:00

Xerox FreeFlow Core contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/22.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-2251' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/611.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-2252' target='_blank'></a><ul><li>Path traversal (CWE-22) - CVE-2026-2251</li><li>XML external entity reference (XXE) (CWE-611) - CVE-2026-2252</li></ul>FUJIFILM Business Innovation Corp. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.