XXE

Everything Threat Times has reported about XXE: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

ZDI Discloses Unpatched Sparx Enterprise Architect XXE Flaw Allowing Local File Access

Threat TimesOct 16, 2026

A high-severity XML External Entity vulnerability in Sparx Enterprise Architect 17.1 lets attackers access local files, with no vendor patch confirmed yet.

Vulnerabilities

Adobe Experience Manager XXE Flaw CVE-2026-90531 Allows Privilege Escalation

Threat TimesOct 13, 2026

A critical XML external entity vulnerability in Adobe Experience Manager enables low-privileged attackers to gain elevated access without user interaction.