SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89212

HIGH · CVSS 8.6 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The Akana API Platform is vulnerable to an XML external entity (XXE) attack due to improper restrictions during XML-to-JSON processing, potentially allowing an attacker to access sensitive data or execute unauthorized actions. This high-severity flaw affects versions 2026.1, 2025.1.1, and all releases prior to 2024.1.6, including unsupported versions. Organizations using affected versions should prioritize applying the latest security patch to mitigate the risk.

CVE
CVE-2026-89212
Severity
HIGH
CVSS
8.6
EPSS
0.33%

Original NVD Description

A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.