
SysAid IT support software has undergone recent scrutiny after cybersecurity researchers at watchTowr Labs discovered serious vulnerabilities in its on-premise version. These threats originate from XML External Entity (XXE) injections identified as CVE-2025-2775, CVE-2025-2776, and CVE-2025-2777, capable of compromising XML parsing processes by injecting hazardous XML entities. Such breaches can lead to significant security risks like Server-Side Request Forgery (SSRF)