XXE Vulnerability in Distribution Management Level-Rule Module

Publication date: 2026-09-08

Last updated on: 2026-09-09

Assigner: MITRE

Description

An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79572

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-611	The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

Attack-Flow Graph

Executive Summary

This is an XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0. It allows attackers to read sensitive files, scan internal networks, or launch server attacks by sending a specially crafted XML payload.

Impact Analysis

Attackers could exploit this to access confidential data, probe internal systems, or compromise the server hosting the vulnerable software. This may lead to data breaches, unauthorized access, or service disruption.

Mitigation Strategies

Disable XML external entity processing in the XML parser used by Distribution Management v1.0.0. Update to a patched version if available. Restrict network access to the affected system and monitor for unusual XML input attempts.

Hi! I’m here to help you understand CVE-2026-79572. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70