CVE-2018-11586: Searchblox

Critical severity, CVSS 9.8. EPSS: 15% chance of exploitation in the next 30 days.

XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Affected products

• Searchblox Searchblox: version 8.6.7 only

Published 2018-06-05. Last modified 2026-06-17.