CVE-2026-36765 - SpringBlade XXE Code Execution Vulnerability
CVE ID :CVE-2026-36765 Published : April 30, 2026, 6:16 p.m. | 26 minutes ago Description :An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a crafted payload. Severity
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Chinese hackers vulnerable to U.S. arrest if they travel, FBI official says
- [CYBER] FBI cyber boss: China's hacker-for-hire ecosystem 'out of control'
- [CYBER] After dissing Anthropic for limiting Mythos, OpenAI restricts access to Cyber, too
- [CYBER] New Bluekit phishing service includes an AI assistant, 40 templates
- [CYBER] Anthropic Unveils Claude Security to Counter AI-Powered Exploit Surge
- [CYBER] AI Fuels ‘Industrial’ Cybercrime as Time-to-Exploit Shrinks to Hours