Fast-xml-parser vulnerabilities affect Sentio Creator Extension 'Device Manager'
Multiple vulnerabilities in the third-party component fast-xml-parser affect the Device Manager Extension in Sentio Creator. The extension is maintained and updated independently from SICK Sentio Creator, but successful exploitation of these vulnerabilities could impact the security of the Sentio Creator. SICK strongly recommends upgrading the extension to remediate the identified issues.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-27942US | high7.5 | — | ||
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. Prior to version 5.3.8, the applica… | ||||
| CVE-2026-25896US | — | — | ||
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. From 4.1.3to before 5.3.5, a dot (.… | ||||
| CVE-2026-26278US | — | — | ||
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 4.1.3 through 5.3.5, th… | ||||
references
External citations — patches, advisories, analysis.
remediations (3)
- FixedSentio Creator
It is strongly recommended to upgrade the Device Manger Extension to version 1.1.1.
- FixedSentio Creator
It is strongly recommended to upgrade the Device Manger Extension to version 1.1.1.
- FixedSentio Creator
It is strongly recommended to upgrade the Device Manger Extension to version 1.1.1.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan