https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T21:34:26.128827+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-66089 CVE-2026-66089 — XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion 2026-10-29T21:34:26.130272+00:00

Affected: Apereo Foundation openEQUELLA

In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This allows an attacker to read arbitrary files accessible to the openEQUELLA service or cause the server to issue requests to attacker-specified locations (SSRF).