cbcvebase.

Teccom Tecconnect vulnerabilities

1 known vulnerability affecting teccom/tecconnect.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-10183P2CRITICALCVSS 9.1v4.12025-09-09
CVE-2025-10183 [CRITICAL] CWE-611 CVE-2025-10183: A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server. TecConnect 4.1 is considered end-of-life as of December 2023. Users are advised to upgrade to TecCom Connect 5.
nvd
Teccom Tecconnect vulnerabilities | cvebase