Known Exploited Vulnerabilities July 22, 2025 · CISA KEV Catalog

CVE-2025-2776: Sys Aid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-2776 SysAid
Related: CVE-2025-2775: Sys Aid On-Prem Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Jul 22, 2025
CVE-2023-47246: Sys Aid Server Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 13, 2023
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026