{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776) · updates",
  "home_page_url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775",
  "feed_url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775/feed.json",
  "description": "CVE-2025-2775: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. CVE-2025-2776: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. Added to CISA KEV on 2025-07-22.",
  "language": "en",
  "_pwn": {
    "slug": "sysaid-on-prem-cve-2025-2775",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775/feed.xml",
    "llms": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775/llms.txt",
    "json": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775#2025-07-22-e4a72f9f",
      "url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775#2025-07-22-e4a72f9f",
      "title": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2775 to the KEV catalog (due 2025-08-12).",
      "content_text": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2775 to the KEV catalog (due 2025-08-12).",
      "date_published": "2025-07-22T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775#2025-07-22-10375c90",
      "url": "https://pwn.watch/i/sysaid-on-prem-cve-2025-2775#2025-07-22-10375c90",
      "title": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2776 to the KEV catalog (due 2025-08-12).",
      "content_text": "SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2776 to the KEV catalog (due 2025-08-12).",
      "date_published": "2025-07-22T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    }
  ]
}