SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776) ยท updates https://pwn.watch/i/sysaid-on-prem-cve-2025-2775 CVE-2025-2775: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. CVE-2025-2776: SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. Added to CISA KEV on 2025-07-22. en Tue, 22 Jul 2025 00:00:00 GMT SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2775 to the KEV catalog (due 2025-08-12). https://pwn.watch/i/sysaid-on-prem-cve-2025-2775 https://pwn.watch/i/sysaid-on-prem-cve-2025-2775#2025-07-22-e4a72f9f Tue, 22 Jul 2025 00:00:00 GMT critical <p>SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2775 to the KEV catalog (due 2025-08-12).</p> SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2776 to the KEV catalog (due 2025-08-12). https://pwn.watch/i/sysaid-on-prem-cve-2025-2775 https://pwn.watch/i/sysaid-on-prem-cve-2025-2775#2025-07-22-10375c90 Tue, 22 Jul 2025 00:00:00 GMT critical <p>SysAid On-Prem: 2 exploited vulnerabilities (CVE-2025-2775, CVE-2025-2776): CISA added CVE-2025-2776 to the KEV catalog (due 2025-08-12).</p>