Xxe

Apache Tika PDF Parser XXE via Crafted XFA Form (CVE-2025-54988) new EPSS 15%CVE-2025-54988webCRITICAL 9.8Patched2026-07-31Adobe Experience Manager Forms XXE to JNDI RCE Scanner (CVE-2025-54253) new KEV EPSS 88%CVE-2025-54253webCRITICAL 10Unverified2026-07-06GRASSMARLIN XML External Entity (XXE) Out-of-Band File Exfiltration (CVE-2026-6807) newCVE-2026-6807networkHIGHUnverified2026-07-05