XXE in Asseco Procertum Smartsign
CVE-2026-57917
proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity (XXE) vulnerabilit…
Vulnerability class: XXE (XML External Entity)
Affected products
- Asseco Procertum Smartsign — versions 0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)