XML External Entity Flaw in Akana API Platform by Perforce
⚠️ CVE-Referenzen:
CVE-2026-89212
Perforce - Akana - CRITICAL - CVE-2026-89212.
A vulnerability exists within the Akana API Platform that allows for XML External Entity (XXE) exploitation due to misconfigured XML-to-JSON processing. This flaw permits attackers to send crafted XML data that gains unauthorized access to internal files or services. The affected Akana versions include 2026.1, 2025.1.1, and all versions prior to 2024.1.6, including unsupported versions. A security patch has been introduced in the latest release to address this serious concern.
Quelle: securityvulnerability.io