MajorCritical vulnerability
CVE-2026-77090 (CVSS 8.7)
NVD · officialPublished Oct 13, 2026Risk 37/100
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Technical details
CVSS
8.7
AV:NetworkAC:LowPR:NoneUI:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source