Source: thehackernews.com – Author: .
Cybersecurity researchers have disclosed multiple security flaw in the on-premise version of SysAid IT support software that could be exploited to achieve pre-authenticated remote code execution with elevated privileges.
The vulnerabilities, tracked as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777, have all been described as XML External Entity (XXE) injections, which occur when an attacker is
Original Post url: https://thehackernews.com/2025/05/sysaid-patches-4-critical-flaws.html
Category & Tags: –
Views: 25
