CVE-2026-82525

MEDIUM 5.5

Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding malicious external entity references and attacker-controlled XSLT stylesheets within a Report.xml file inside a UFDR ZIP evidence item. Attackers can craft a malicious UFDR archive that, when previewed by an examiner, causes the XML parser to resolve file:// external entity references and execute msxsl:script within the external stylesheet to exfiltrate the resolved file contents to an attacker-controlled endpoint via a generated image URL.

CWE	CWE-611 CWE-829
Vendor	exterro
Product	ftk imager
Published	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for exterro ftk imager

Be the first to know when new medium vulnerabilities affecting exterro ftk imager are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Exterro / FTK Imager

0 < 8.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

d1kpmuwb7gvu1i.cloudfront.net: https://d1kpmuwb7gvu1i.cloudfront.net/8.x/8.3.0/Exterro%20FTK%20Imager%208.3%20-%20Release%20Notes.pdf exterro.com: https://www.exterro.com/ftk-downloads/ftk-imager-8-3 vulncheck.com: https://www.vulncheck.com/advisories/exterro-ftk-imager-xxe-via-report-xml-xslt-processing

Credits

Mobasi Security Team