EIP-2026-119684

This advisory details an XML External Entity Injection (XXE) vulnerability in RSA Enterprise Compromise Assessment Tool (ECAT) version 4.1.0.1, allowing attackers to read files and perform internal network scans by tricking users into importing a malicious XML whitelisting file.