{"id":"CVE-2026-79572","title":"An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload.","summary":"An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-611"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:20:43.387","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79572","references":[{"url":"https://github.com/fangtang7/CVE/blob/main/Distribution%20Management/XXE.md","label":"cve@mitre.org"},{"url":"https://github.com/fangtang7/CVE/blob/main/Distribution%20Management/XXE.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.0044,"epssPercentile":0.35644,"ingestedAt":"2026-09-08T15:33:26.987Z","exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-09T19:13:57.973423Z"},"slug":"CVE-2026-79572","body":"## Overview\n\nAn XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202690,"id":"CVE-2026-79572","ts":1789402236981,"field":"exploit_available","old":"false","new":"true"},{"seq":201978,"id":"CVE-2026-79572","ts":1789399993463,"field":"cvss","old":null,"new":"7.5"},{"seq":201977,"id":"CVE-2026-79572","ts":1789399993463,"field":"severity","old":"none","new":"high"},{"seq":200705,"id":"CVE-2026-79572","ts":1789397585531,"field":"cvss","old":"7.5","new":null},{"seq":200704,"id":"CVE-2026-79572","ts":1789397585531,"field":"severity","old":"high","new":"none"},{"seq":199405,"id":"CVE-2026-79572","ts":1789395477271,"field":"cvss","old":null,"new":"7.5"},{"seq":199404,"id":"CVE-2026-79572","ts":1789395477271,"field":"severity","old":"none","new":"high"},{"seq":198650,"id":"CVE-2026-79572","ts":1789392188228,"field":"cvss","old":"7.5","new":null},{"seq":198649,"id":"CVE-2026-79572","ts":1789392188228,"field":"severity","old":"high","new":"none"},{"seq":196981,"id":"CVE-2026-79572","ts":1789384273291,"field":"cvss","old":null,"new":"7.5"},{"seq":196980,"id":"CVE-2026-79572","ts":1789384273291,"field":"severity","old":"none","new":"high"},{"seq":194112,"id":"CVE-2026-79572","ts":1789378694061,"field":"cvss","old":"7.5","new":null},{"seq":194111,"id":"CVE-2026-79572","ts":1789378694061,"field":"severity","old":"high","new":"none"},{"seq":192899,"id":"CVE-2026-79572","ts":1789376494544,"field":"cvss","old":null,"new":"7.5"},{"seq":192898,"id":"CVE-2026-79572","ts":1789376494544,"field":"severity","old":"none","new":"high"},{"seq":191686,"id":"CVE-2026-79572","ts":1789373590420,"field":"cvss","old":"7.5","new":null},{"seq":191685,"id":"CVE-2026-79572","ts":1789373590420,"field":"severity","old":"high","new":"none"},{"seq":190471,"id":"CVE-2026-79572","ts":1789369449676,"field":"cvss","old":null,"new":"7.5"},{"seq":190470,"id":"CVE-2026-79572","ts":1789369449676,"field":"severity","old":"none","new":"high"},{"seq":189258,"id":"CVE-2026-79572","ts":1789368373482,"field":"cvss","old":"7.5","new":null},{"seq":189257,"id":"CVE-2026-79572","ts":1789368373482,"field":"severity","old":"high","new":"none"},{"seq":188041,"id":"CVE-2026-79572","ts":1789365211614,"field":"cvss","old":null,"new":"7.5"},{"seq":188040,"id":"CVE-2026-79572","ts":1789365211614,"field":"severity","old":"none","new":"high"},{"seq":186828,"id":"CVE-2026-79572","ts":1789363454983,"field":"cvss","old":"7.5","new":null},{"seq":186827,"id":"CVE-2026-79572","ts":1789363454983,"field":"severity","old":"high","new":"none"},{"seq":185614,"id":"CVE-2026-79572","ts":1789361195342,"field":"cvss","old":null,"new":"7.5"},{"seq":185613,"id":"CVE-2026-79572","ts":1789361195342,"field":"severity","old":"none","new":"high"},{"seq":184401,"id":"CVE-2026-79572","ts":1789358318974,"field":"cvss","old":"7.5","new":null},{"seq":184400,"id":"CVE-2026-79572","ts":1789358318974,"field":"severity","old":"high","new":"none"},{"seq":182652,"id":"CVE-2026-79572","ts":1789354302680,"field":"cvss","old":null,"new":"7.5"},{"seq":182651,"id":"CVE-2026-79572","ts":1789354302680,"field":"severity","old":"none","new":"high"},{"seq":181445,"id":"CVE-2026-79572","ts":1789353280107,"field":"cvss","old":"7.5","new":null},{"seq":181444,"id":"CVE-2026-79572","ts":1789353280107,"field":"severity","old":"high","new":"none"},{"seq":180238,"id":"CVE-2026-79572","ts":1789350265496,"field":"cvss","old":null,"new":"7.5"},{"seq":180237,"id":"CVE-2026-79572","ts":1789350265496,"field":"severity","old":"none","new":"high"},{"seq":179031,"id":"CVE-2026-79572","ts":1789348257074,"field":"cvss","old":"7.5","new":null},{"seq":179030,"id":"CVE-2026-79572","ts":1789348257074,"field":"severity","old":"high","new":"none"},{"seq":177824,"id":"CVE-2026-79572","ts":1789346356006,"field":"cvss","old":null,"new":"7.5"},{"seq":177823,"id":"CVE-2026-79572","ts":1789346356006,"field":"severity","old":"none","new":"high"},{"seq":176617,"id":"CVE-2026-79572","ts":1789343157285,"field":"cvss","old":"7.5","new":null},{"seq":176616,"id":"CVE-2026-79572","ts":1789343157285,"field":"severity","old":"high","new":"none"},{"seq":174734,"id":"CVE-2026-79572","ts":1789334853160,"field":"cvss","old":null,"new":"7.5"},{"seq":174733,"id":"CVE-2026-79572","ts":1789334853160,"field":"severity","old":"none","new":"high"},{"seq":173529,"id":"CVE-2026-79572","ts":1789333641300,"field":"cvss","old":"7.5","new":null},{"seq":173528,"id":"CVE-2026-79572","ts":1789333641300,"field":"severity","old":"high","new":"none"},{"seq":172343,"id":"CVE-2026-79572","ts":1789331080637,"field":"cvss","old":null,"new":"7.5"},{"seq":172342,"id":"CVE-2026-79572","ts":1789331080637,"field":"severity","old":"none","new":"high"},{"seq":171157,"id":"CVE-2026-79572","ts":1789328750834,"field":"cvss","old":"7.5","new":null},{"seq":171156,"id":"CVE-2026-79572","ts":1789328750834,"field":"severity","old":"high","new":"none"},{"seq":169952,"id":"CVE-2026-79572","ts":1789327144672,"field":"cvss","old":null,"new":"7.5"}]}