What’s Vulnerable › Vulnerabilities
CVE-2026-89212: XML External Entity in Akana API Platform
- Severity: high (CVSS 8.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-11 · updated 2026-09-18
- Weakness: CWE-611
Description
A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.
Affected products
- Perforce Akana: from 2024.1.0 through 2024.1.5; from 2025.1.0 through 2025.1.1; All versions prior to 2024.1, 2026.1
References
Get alerted when CVE-2026-89212 or the next vulnerability affects your stack