Akana vulnerabilities

2 known vulnerabilities in Akana from Perforce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Akana: Improper Restriction of XML External Entity Reference

  CVE-2026-89212Sep 11, 2026Perforce

  A flaw resulting in XML external entity (XXE) was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 (including older uns

• 9.8 Critical severity

  Akana: Improper Resolution of Path Equivalence

  CVE-2026-85978Sep 9, 2026PerforceEPSS 1.44%

  An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication a