← All advisories

Medium severityNVD Advisory· Published Sep 8, 2026

CVE-2026-19614

CVE-2026-19614

Description

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Affected products

3

Nanoxml/Nanoxmlinferred2 versions
=2.2.3+ 1 more
- (no CPE)range: =2.2.3
- (no CPE)range: =2.2.3
Thales Group/NanoXMLllm-create
Range: =2.2.3

Patches

Vulnerability mechanics

References

1

www.thalesgroup.com/en/search/cybersecurity/cybersecurity-services/cve-2026-19614nvd

News mentions

0

No linked articles in our index yet.