TI-2025-09348 CVE-2025-10183 · GHSA-96j8-8455-q77xXML External Entity Injection in TecConnect 4.1Priority HIGH 78A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server.CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00429 · Published 2025-09-09 · No fix listed CWE-611