CVE-2026-57917
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-611
Restricción incorrecta de referencia a entidad externa XML (XXE)
Fecha de publicación:
27/07/2026
Última modificación:
27/07/2026
Descripción
*** Pendiente de traducción *** proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser&#39;s configuration. The XML External Entity (XXE) vulnerability is triggered simply by previewing a file in the file selection window, before the victim clicks “Open”.<br />
<br />
This issue was fixed in version 9.4.3.90.
Impacto
Puntuación base 4.0
4.80
Gravedad 4.0
MEDIA