CVE-2026-89212: Perforce Akana, инжекция

Описание

Оригинално описание

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.

Засегнати продукти

• Perforce Akana: 2024.1.6, 2025.1.2, 2026.2; All versions prior to 2024.1; 2024.1.0 до 2024.1.5; 2025.1.0 до 2025.1.1; 2026.1

Вид слабост

• CWE-611 Improper Restriction of XML External Entity Reference

История

Други уязвимости в Perforce Akana

• 10.0CVE-2026-85978

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-89212
• https://nvd.nist.gov/vuln/detail/CVE-2026-89212
• https://portal.perforce.com/s/cve/a91Qi000003CxPBIA0/xml-external-entity-in-akana-api-platform