Medium severity6.2NVD Advisory· Published Apr 26, 2026· Updated Apr 27, 2026

CVE-2018-25282

Description

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the program to consume excessive system resources and crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nmap/Nmapllm-fuzzy
Range: =7.70

Patches

Vulnerability mechanics

References

nmap.org/dist/nmap-7.70-setup.exenvd
www.exploit-db.com/exploits/45357nvd
www.vulncheck.com/advisories/nmap-denial-of-service-via-xml-entity-expansionnvd

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000