CVE-2025-10183 XML External Entity Injection in TecConnect 4.1
An unauthenticated attacker can exploit blind XXE in TecConnect to exfiltrate arbitrary files to an external server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-10183?
CVE-2025-10183 is a critical vulnerability in TecCom TecConnect, published on 9 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server. TecConnect 4.1 is considered end-of-life as of December 2023. Users are advised to upgrade to TecCom Connect 5.
Weakness: CWE-611
Which versions are affected by CVE-2025-10183?
How do I fix CVE-2025-10183?
No fix has been published for CVE-2025-10183 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-10183 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-10183 exists.
Sources
Also known as GHSA-96j8-8455-q77x.