What’s Vulnerable › Vulnerabilities

CVE-2026-82918

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-03 · updated 2026-10-14
• Weakness: CWE-611

Description

XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software provided by Keyence Corporation improperly restrict XML external entity references. If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.

Affected products

• Keyence Corporation LJ Series Terminal-Software: through Ver.2.4.0000
• Keyence Corporation WI Series Terminal-Software: through Ver.1.1.0000
• Keyence Corporation XG-X VisionTerminal: through Ver.3.6.0000
• Keyence Corporation XG VisionTerminal: through Ver.5.5.0010

References

• https://jvn.jp/en/vu/JVNVU98062224/
• https://www.keyence.com/mi26082104
• https://www.keyence.com/mi26090802
• https://www.keyence.com/mi26090804

Get alerted when CVE-2026-82918 or the next vulnerability affects your stack