CVE-2018-10832

ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE injection. Sending a crafted .xmpp or .xmpa file to a user, when opened/imported in ModbusPal, will return the contents of any local files to a remote attacker.

• CWE-611

• http://packetstormsecurity.com/files/147573/ModbusPal-1.6b-XML-External-Entity-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44607/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/147573/ModbusPal-1.6b-XML-External-Entity-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44607/Exploit, Third Party Advisory, VDB Entry

Published

May 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10825Mimo Baby 2 devices do not use authentication or encryption …
• CVE-2018-10827LiteCart before 2.1.2 allows remote attackers to cause a den…
• CVE-2018-10828An issue was discovered in Alps Pointing-device Driver 10.1.…
• CVE-2018-1083Zsh before version 5.4.2-test-1 is vulnerable to a buffer ov…
• CVE-2018-10830In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sy…
• CVE-2018-10831Z-NOMP before 2018-04-05 has an incorrect Equihash solution …
• CVE-2018-10839Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation s…6.5
• CVE-2018-1084corosync before version 2.4.4 is vulnerable to an integer ov…7.5
• CVE-2018-10840Linux kernel is vulnerable to a heap-based buffer overflow i…6.6
• CVE-2018-10841glusterfs is vulnerable to privilege escalation on gluster s…8.8
• CVE-2018-10842Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-10843source-to-image component of Openshift Container Platform be…8.5