CVE-2026-89212: XML External Entity in Akana API Platform
Perforce · Akana
Fixed in 2024.1.6 · Affected: Perforce Akana before 2024.1.6 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 38% of scored CVEs
DescriptionCVE.org
A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Perforce · AkanaAll versions prior to 2024.1; from 2024.1.0 up to and including 2024.1.5; from 2025.1.0 up to and including 2025.1.1; 2026.1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Perforce
- Published
- September 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-89212 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.