CVE-2026-19614

XML External Entity (XXE) Injection in CyberELF NanoXML PUBLISHED

Description (CNA)

The API is prone to XML external entity (XXE) injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3.

Vendor / product	Versions
CyberELF / NanoXML	affected 2.2.3

CWE-611

CISA-ADP

No English description supplied.

No references supplied.