Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #11

openEQUELLA vulnerability EUVD-2026-112566 disclosed with 7.1 severity

Original: 🚨 EUVD-2026-112566 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29

A vulnerability tracked as EUVD-2026-112566 has been disclosed in openEQUELLA, the open-source digital repository maintained by the Apereo Foundation. Versions before 2026.1 leave external entity resolution enabled in the XML parser for item metadata, which could allow a user permitted to create items to exploit the flaw. The issue carries a CVSS v3.1 score of 7.1 and records were updated on 29 October 2026.

Why now: Security feeds are highlighting a newly rated high-severity vulnerability affecting institutional repositories, prompting admins to check patching status.

openEQUELLAApereo FoundationEUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112566 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: openEQUELLA 🏢 Vendor: Apereo Foundation 📅 Updated: 2026-10-29 📝 In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4063979