CVE-2026-82918: Keyence Corporation XG-X VisionTerminal, инжекция

Описание

Оригинално описание

XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity references. If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.

Засегнати продукти

• Keyence Corporation XG-X VisionTerminal: до Ver.3.6.0000
• Keyence Corporation XG VisionTerminal: до Ver.5.5.0010
• Keyence Corporation LJ Series Terminal-Software: до Ver.2.4.0000
• Keyence Corporation WI Series Terminal-Software: до Ver.1.1.0000

Вид слабост

• CWE-611 Improper Restriction of XML External Entity Reference

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-82918
• https://nvd.nist.gov/vuln/detail/CVE-2026-82918
• https://www.keyence.com/mi26082104
• https://www.keyence.com/mi26090802
• https://www.keyence.com/mi26090804
• https://jvn.jp/en/vu/JVNVU98062224/