CVE-2026-82918: XEE
Published Sep 3, 2026
·Updated
XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity references. If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.
Affected Software
4 affected components
Keyence XG VisionTerminal
Keyence XG-X VisionTerminal
Keyence LJ Series Terminal-Software
Keyence WI Series Terminal-Software
Event History
Sep 3, 2026
CVE Published
via MITRE·12:49 PM
Data Sourced
via MITRE·12:49 PM
DescriptionSeverity
Data Sourced
via NVD·01:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must persuade a user to open a specially crafted setting file in XG VisionTerminal or XG-X VisionTerminal. The vulnerability requires local access and user interaction.
2
What is the likely impact of successful exploitation?
Successful exploitation may disclose sensitive information stored on the system where the affected software is installed. The provided information does not indicate impacts to integrity or availability.