CVE-2023-27527: Touki-Kyoutaku-Online Shinseiyo Sogo Soft

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

Affected products

• Touki-Kyoutaku-Online Shinseiyo Sogo Soft: up to and including 7.9a

Published 2023-05-10. Last modified 2026-06-17.