Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
RazrFalcon records in CISA KEVNo RazrFalcon vulnerabilities are listed in CISA KEV.
Priority MEDIUM 45
roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML parsing without limits on attribute count.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-09-17 · No fix listed CWE-407
Open these records in search →