Multiple Keyence products vulnerable to improper restriction of XML external entity reference

{
  "id": "574e70efbadf3e848a1c7a12852bdffa34299acc2b6063987ea7525afba18b76",
  "url": "https://jvn.jp/en/vu/JVNVU98062224/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Multiple Keyence products vulnerable to improper restriction of XML external entity reference",
    "summary": "Opening a specially crafted setting file may disclose sensitive information stored on the affected system. Updates are available for XG-X VisionTerminal, LJ Series Terminal-Software, and WI Series Terminal-Software. XG VisionTerminal is end-of-life; users are advised to upgrade to XG-X VisionTerminal.",
    "evidence": "If a user opens a specially crafted setting file, the sensitive information stored in the system where the affected product is installed may be disclosed.",
    "products": [
      {
        "name": {
          "value": "XG-X VisionTerminal",
          "evidence": "XG-X VisionTerminal Ver.3.6.0000 and earlier"
        },
        "prerequisites": [
          {
            "value": "Do not open untrusted setting files",
            "evidence": "Do not open untrusted setting files"
          }
        ],
        "fixed_versions": [
          {
            "value": "Ver.3.7.0000 or above",
            "evidence": "XG-X VisionTerminal Ver.3.7.0000 or above"
          }
        ],
        "affected_versions": [
          {
            "value": "Ver.3.6.0000 and earlier",
            "evidence": "XG-X VisionTerminal Ver.3.6.0000 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "XG VisionTerminal",
          "evidence": "XG VisionTerminal Ver.5.5.0010 and earlier"
        },
        "prerequisites": [
          {
            "value": "Do not open untrusted setting files",
            "evidence": "Do not open untrusted setting files"
          }
        ],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "Ver.5.5.0010 and earlier",
            "evidence": "XG VisionTerminal Ver.5.5.0010 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "LJ Series Terminal-Software",
          "evidence": "LJ Series Terminal-Software Ver.2.4.0000 and earlier"
        },
        "prerequisites": [
          {
            "value": "Do not open untrusted setting files",
            "evidence": "Do not open untrusted setting files"
          }
        ],
        "fixed_versions": [
          {
            "value": "Ver.2.4.0002 or above",
            "evidence": "LJ Series Terminal-Software Ver.2.4.0002 or above"
          }
        ],
        "affected_versions": [
          {
            "value": "Ver.2.4.0000 and earlier",
            "evidence": "LJ Series Terminal-Software Ver.2.4.0000 and earlier"
          }
        ]
      },
      {
        "name": {
          "value": "WI Series Terminal-Software",
          "evidence": "WI Series Terminal-Software Ver.1.1.0000 and earlier"
        },
        "prerequisites": [
          {
            "value": "Do not open untrusted setting files",
            "evidence": "Do not open untrusted setting files"
          }
        ],
        "fixed_versions": [
          {
            "value": "Ver.1.1.0001 or above",
            "evidence": "WI Series Terminal-Software Ver.1.1.0001 or above"
          }
        ],
        "affected_versions": [
          {
            "value": "Ver.1.1.0000 and earlier",
            "evidence": "WI Series Terminal-Software Ver.1.1.0000 and earlier"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-82918",
        "evidence": "CVE-2026-82918"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-jvn-english",
  "document_id": 23861,
  "published_at": "2026-10-07T04:00:00+00:00"
}