TI-2026-15932 CVE-2026-19614 · GHSA-26jv-2hm2-rqwvXML External Entity (XXE) Injection in CyberELF NanoXMLPriority LOW 24The API is prone to XML external entity (XXE) injection.CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00392 · Published 2026-09-08 · No fix listed CWE-611