Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #10

XML vulnerability disclosed in Apereo openEQUELLA

Original: 🚨 EUVD-2026-112565 📊 Score: 6.1/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29

A medium-severity vulnerability, tracked as EUVD-2026-112565 with a CVSS score of 6.1, has been disclosed in openEQUELLA, the open-source learning content management system maintained by the Apereo Foundation. Versions before 2026.1 are affected: the SOAP API's stopEdit operation parses XML with a parser that resolves external entities, allowing a potential XXE attack. Users are advised to update to 2026.1.

Why now: Security teams are monitoring the new advisory to assess whether their openEQUELLA deployments need patching.

openEQUELLAApereo Foundation

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112565 📊 Score: 6.1/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29 📝 In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This allows an… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4063978