CVE-2026-77090
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.
Published Oct 13, 2026 · updated Oct 14, 2026
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Oct 14, 2026 · NIST NVD
Updated
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Oct 14, 2026 · NIST NVD
Updated
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Sources
- CVE.orgVulnerability recordCVE-2026-77090
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-77090
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2026-77090
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
nvd.nist.gov