CVE-2026-88794 - XML External Entity injection in Sparx Enterprise Architect
CVE ID :CVE-2026-88794 Published : Oct. 15, 2026, 1:17 p.m. | 16 minutes ago Description :Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the...