VulnSocial

CVE-2026-93570

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's filesystem. This issue was fixed in Szafir version 2.0 build 708. Szafir Weryfikująca is no longer supported (End of Life) and has not been fixed.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-611

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-01: 111-01
Referenced assets1 URL
By indicator
Full discourse1 post
  • Mateusz Makowski@nietechniczny

    @BlazejKolodziej Ale to jedna z trzech podatności, o których wspominam. @CERT_Polska pisał o trzech łukach - źródło tutaj: https://cert.pl/posts/2026/10/CVE-2026-93570/

    1001038
    882 followersView on X

Explore more

Back to dashboard