Akana

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:perforce:akana:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPerforce (b6773f0f-3a72-52f1-9555-ff325a988421)
ProductAkana (625c58b0-23c6-5270-a02d-2b83cfc03f1b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-89212 not_vulnerable 2026-09-16 04:34:09.395585 XML External Entity in Akana API Platform
HIGH (8.6)
A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older unsupported versions of Akana) and has been fixed as a security patch in the latest release of supported versions.
Published: 2026-09-11T13:23:56.485Z
Updated: 2026-09-11T13:57:07.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-85978 not_vulnerable 2026-09-16 04:33:08.264714 Unauthenticated Remote Code Execution in Akana API Platform
CRITICAL (9.8)
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates attacker-supplied script code without sandboxing, resulting in arbitrary code execution. Exploitation requires no authentication or user interaction.
Published: 2026-09-09T10:31:55.863Z
Updated: 2026-09-09T14:19:29.425Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.