CVE-2026-6807
CWE-611Published: April 28, 2026· Updated: Apr 28, 2026
Official Description
A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to
trigger improper handling of XML input, which may result in unintended
exposure of sensitive information. The flaw stems from insufficient
hardening of the XML parsing process.
Technical Analysis
CVE-2026-6807 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.5.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
News & Research Mentioning CVE-2026-6807
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information. The following versions of NSA GRASSMARLIN are affected: GRASSMARLIN vers:all/* CVSS Vendor Equipment Vulnerabilities v3 5.5 NSA NSA GRASSMARLIN Improper Restriction of XML External Entity Reference Background Critical Infrastructure Sectors: Information Technology Countries/Areas Deployed: Worldwide Company Headquarters Location: United States Vulnerabilities Expand All + CVE-2026-6807 A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information. The flaw stems from insufficient hardening of the XML parsing process. Vi [xlite_meta score:76 src:CISA Alerts xlite_fp:e088b54dc74d93a7da3d632ae0908c7992392e3c1bea555eab396162a10449c3]
All References (2)
Quick Facts
Known Threat Actors
Related CVEs (CWE-611)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-6807 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts