216.73.216.233

CVE-2026-38429

· Published 05/05/2026 17:17 · Modified 05/05/2026 20:24

Labels: CVE-2026-38429 2026-05-05CVE-2026-38429[email protected]

Essential information

Published
05/05/2026 17:17
Modified
05/05/2026 20:24
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml.

NVD status

Status
Deferred — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
opencms / opencms cpe:2.3:a:opencms:opencms:*:*:*:*:*:*:*:*

References