XML External Entity Vulnerability in XG VisionTerminal by Keyence Corporation
CVE-2026-82918

6.7MEDIUM

Key Information:

Vendor: Keyence Corporation
Status: Xg-x Visionterminal; Xg Visionterminal
Vendor: CVE Published:; 3 September 2026

🔔 Create Keyence Corporation Vulnerability Alert

What is CVE-2026-82918?

XG VisionTerminal and XG-X VisionTerminal by Keyence Corporation have a vulnerability that allows improper restriction of XML external entity references. When users open a specially crafted setting file, sensitive data stored on the system can be exposed, potentially leading to unauthorized access to confidential information.

Affected Version(s)

XG VisionTerminal Ver.5.5.0010 and earlier

XG-X VisionTerminal Ver.3.6.0000 and earlier

References

https://www.keyence.com/mi26082104

https://jvn.jp/en/vu/JVNVU98062224/index.html

CVSS V4

Score:

6.7

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 3, 2026
Vulnerability Reserved
Aug 31, 2026

CVE-2026-82918 Data

JSON