Description
An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a crafted payload.
High · 8.8
CVE-2026-36765
EUVD-2026-26400GHSA-6mrw-vx77-335c
An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to exe…
Published Apr 30, 2026 · Updated May 4, 2026 · Assigned by mitre