CVE-2025-2776

🚨 CVE-2025-2776 - critical 🚨 SysAid On-Prem <= 23.3.40 - XML External Entity > SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External ... 👾 https://t.co/ygOG7xaEk0 @pdnuclei #NucleiTemplates #cve

【リンク集：5月7日〜8日のセキュリティ関連ニュース/記事】 ＜脆弱性＞ ・マイクロソフトが発表、4月のアップデートでWindows Serverの認証に問題発生 https://t.co/u0O5Pz35EM ・SysAid、オンプレミス版における4つの

[CVE-2025-2776: CRITICAL] SysAid On-Prem versions <= 23.3.40 exposed to XXE vulnerability in Server URL processing allows admin account takeover & file read primitives. #CyberSecurity#cve,CVE-2025-2776,#cybersecurity https://t.co/Tyq0I5JniP https://t.co/FYKJYGxWMg

We are sharing SysAid instances likely vulnerable to CVE-2025-2775, CVE-2025-2776, CVE-2025-2777 (XXEs) any of which combined with CVE-2025-2778 allows for RCE. 77 IPs found unpatched so far (version check). Install updates from SysAid (from March!) https://t.co/SNVkIeSfF3 h

[SysAid fixes four critical vulnerabilities that enable RCE] SysAid has released an update for the on-premise version of its software that eliminates four critical vulnerabilities at once — CVE-2025-2775, CVE-2025-2776, CVE-2025-2777 and CVE-2025-2778. Vulnerabilities allowe

📌 قامت SysAid بإصلاح أربع ثغرات حرجة في إصدارها المحلي من برنامج دعم تكنولوجيا المعلومات، تسمح بتنفيذ تعليمات برمجية عن بُعد دون مصادقة، مع حقوق مرتفعة. ال