Skip to content
OpenAdvisories
High · 7.5 CVE-2026-8396 EUVD-2026-45165GHSA-wrw3-44cj-hmrf

XXE in Netcad's NetGIS

Published Jul 17, 2026 · Updated Jul 17, 2026 · Assigned by TR-CERT

Description

Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Data External Linking.

This issue affects NetGIS: from 5.0.66 before 7.2.2.

Affected products

VendorProductAffectedFixed
Netcad Software NetGIS 5.0.66 – < 7.2.2 7.2.2

References