CVE-2023-26999

Critical · CVSS 9.8

NetScout nGeniusOne — XML External Entity (XXE) Injection leading to RCE / DoS (CWE-611)

CVSS: 9.8; nvd
EPSS: 1.39%; 69th pct
KEV: No
Class: other; CWE-611, CWE-611

Description

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.

Search profile — drives PoC discovery

Symbols nGeniusOneXXEcrafted fileXML external entityfile uploadarbitrary code execution

Keywords CVE-2023-26999NetScout nGeniusOnenGeniusOne XXEnGeniusOne RCEnGeniusOne exploitnGeniusOne 6.3.4NetScout XXEpiotrryciak netscoutnGeniusOne PoCnGeniusOne denial of service

Versions: 6.3.4

References

https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/
http://netscout.com
http://ngeniusone.com
https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T12:30:39.000Z