CVE-2026-93030: FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.

CVE-2026-93030 · Severity: medium · CVSS 6.5 · Published 2026-09-25

Executive brief

FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw.