🎯 XXE

The items that name it 8

• https://github.com/akha-security/akca
  repo2026-09-23It is written here as XML External Entity (XXE) injection.

  XXE

• SAML: A fractal of bad design
  article2026-09-21It is written here as XXE (XML External Entity).

  XML bug class that SAML libraries must defend against

• Metasploit Wrap Up: This One Goes to Sixteen!
  article2026-09-11It is written here as XML External Entity (XXE) injection.

  Local file read via Apache Tika's XFA parser exposed through Elasticsearch ingest-attachment processor

• Teycir/BurpAPISecuritySuite
  repo2026-08-21It is written here as XXE (XML External Entity).

  File disclosure, SSRF via XXE, denial of service

• Strix
  repo2026-07-15

  Server-side vulnerability tested by Strix

• RAPTOR
  repo2026-06-28It is written here as XXE (XML External Entity).

  Covered by Semgrep rules and CodeQL Java queries

• claude-code-security-review
  repo2026-05-10

  XML external entity injection detected by the tool

• Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
  advisoryIt is written here as XML External Entity (XXE) injection.

  Conducting XXE injection attacks on affected devices (CVE-2026-76423 group).