PT-2026-28357
CVE-2026-27664
·
Published
2026-03-26
·
Updated
2026-04-16
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
CPCI85 Central Processing/Communication versions prior to V26.10
SICORE Base system versions prior to V26.10.0
Description
An out-of-bounds write issue exists when parsing specially crafted XML inputs. This could allow an unauthenticated attacker to send a malicious XML request, potentially causing a denial-of-service condition by crashing the service. Multiple reports indicate offensive activities targeting these systems.
Recommendations
Update CPCI85 Central Processing/Communication to version 26.10 or later.
Update SICORE Base system to version 26.10.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾