CWE-91

CWE-91 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-91, highest CVSS first.

  1. HIGH 7.7CVE-2026-769792026-09-23

    ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking Compare Policies feature.

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.9CVE-2026-65124public PoC2026-09-22

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service.

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-1030442026-09-29

    XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.

    AI risk analysis on Exploit-DB.ai →