PT-2026-60743 · Netgis · Netgis
CVE-2026-8396
·
Published
2026-07-17
·
Updated
2026-07-17
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
NetGIS versions 5.0.66 through 7.2.1
Description
NetGIS contains an improper restriction of XML external entity (XXE) reference, which allows serialized data external linking. XXE is a type of attack where an application processes XML input containing a reference to an external entity, potentially allowing an attacker to read arbitrary files or interact with internal systems.
Recommendations
Update NetGIS to version 7.2.2 or later.
Fix
XXE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgis