GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1 vulnerability found for XG VisionTerminal by KEYENCE CORPORATION.

    JVNDB-2026-031532

    Vulnerability from jvndb - Published: 2026-09-03 06:31 - Updated:2026-09-03 06:31
    Severity
    Summary
    Improper restriction of XML external entity reference in XG VisionTerminal and XG-X VisionTerminal
    Details
    XG VisionTerminal and XG-X VisionTerminal provided by Keyence Corporation contain the following vulnerability.
    • Improper restriction of XML external entity reference (CWE-611) - CVE-2026-82918
    Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.
    References
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-031532.html",
      "dc:date": "2026-09-03T15:31+09:00",
      "dcterms:issued": "2026-09-03T15:31+09:00",
      "dcterms:modified": "2026-09-03T15:31+09:00",
      "description": "XG VisionTerminal and XG-X VisionTerminal provided by Keyence Corporation contain the following vulnerability.\u003ca href=\u0027http://cwe.mitre.org/data/definitions/611.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eImproper restriction of XML external entity reference (CWE-611) - CVE-2026-82918\u003c/li\u003e\u003c/ul\u003eMichael Heinzl reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
      "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-031532.html",
      "sec:cpe": [
        {
          "#text": "cpe:/a:keyence:xg-x_visionterminal",
          "@product": "XG-X VisionTerminal",
          "@vendor": "KEYENCE CORPORATION.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/a:keyence:xg_visionterminal",
          "@product": "XG VisionTerminal",
          "@vendor": "KEYENCE CORPORATION.",
          "@version": "2.2"
        }
      ],
      "sec:cvss": {
        "@score": "5.5",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "@version": "3.0"
      },
      "sec:identifier": "JVNDB-2026-031532",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/vu/JVNVU98062224/index.html",
          "@id": "JVNVU#98062224",
          "@source": "JVN"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2026-82918",
          "@id": "CVE-2026-82918",
          "@source": "CVE"
        },
        {
          "#text": "https://cwe.mitre.org/data/definitions/611.html",
          "@id": "CWE-611",
          "@title": "Improper Restriction of XML External Entity Reference(CWE-611)"
        }
      ],
      "title": "Improper restriction of XML external entity reference in XG VisionTerminal and XG-X VisionTerminal"
    }