CVE-2026-79572

CVE-2026-79572 is an XML External Entity (XXE) flaw (CWE-611) in the level-rule module of Distribution Management v1.0.0, meaning the module parses XML without properly restricting external entity resolution. An attacker can trigger it by submitting a crafted XML payload to the affected XML-parsing input over the network, with no authentication or user interaction required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Successful exploitation can let the attacker read sensitive files from the server (high confidentiality impact per the vector), probe the internal network, or use the server as a launch point for further attacks. Anyone running Distribution Management v1.0.0 with the level-rule module active is affected; the CVE record does not name a specific vendor or any fixed version. No public proof-of-concept, KEV listing, or confirmed in-the-wild exploitation is known, and EPSS puts the 30-day exploitation probability at a low 0.2% (6th percentile).

What to do: Inventory deployments of Distribution Management v1.0.0 and determine whether the level-rule module is enabled and reachable over the network. Contact the vendor for a patched release or hotfix, and as an interim mitigation disable external entity/DOCTYPE processing (secure XML parser configuration) in the affected module, or restrict network access to its endpoints. Monitor logs for unexpected file reads or outbound/internal connections from the XML parser, since XXE often manifests first as SSRF-style internal probing.