Threats tagged 'ghsa-8pwj-qj2g-7v9v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-118039In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference High7.52026-10-28GCVE DatabaseCVE-2026-118039 An XML external entity (XXE) vulnerability exists in In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027. This flaw occurs during SVG image processing, allowing an unauthenticated attacker to read local files on the server by submitting a crafted SVG image containing a nested embedded SVG. The vulnerability can be triggered when the image is processed or exported to PDF. Report on CVE-2026-118039 Vulnerability CWE-611 #ghsa-8pwj-qj2g-7v9v	GCVE Database	2026-10-28

Page 1 of 1