CVE-2026-77090: CVFS Information Disclosure
Published Oct 13, 2026
·Updated
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Affected Software
1 affected component
CVFS
Event History
Oct 13, 2026
CVE Published
via MITRE·02:26 PM
Data Sourced
via MITRE·02:26 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What should administrators do to remediate this issue?
Upgrade CVFS to the resolved maintenance release identified by the vendor.