CVE-2026-66293 | qcam Saxy up to 1.6.x Encoder escape_comment xml injection

November 6, 2026 Yanac

A vulnerability was found in qcam Saxy up to 1.6.x. It has been declared as critical. The impacted element is the function escape_comment of the component Encoder. Executing a manipulation can lead to xml injection.

This vulnerability appears as CVE-2026-66293. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More