Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Asseco proCertum SmartSign 9.4.3.90 Clear all filters
TI-2026-41696 CVE-2026-57917 · GHSA-fqfw-hf3f-2q4c

Improper Restriction of XML External Entity Reference in proCertum SmartSign

Priority LOW 21

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00182 Published 2026-07-27 Fixed in 9.4.3.90 CWE-611