A vulnerability was found in OpenCMS up to 20. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Import DB. This manipulation causes xml external entity reference.
The identification of this vulnerability is CVE-2026-38429. It is possible to initiate the attack remotely. There is no exploit available.
To fix this issue, it is recommended to deploy a patch.
