PatchSiren

4d CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH 4d CVE published 2026-04-30

CVE-2024-39847

CVE-2024-39847 is a high-severity vulnerability in 4D Server SOAP endpoint XML parsing. According to the NVD description, an unauthenticated attacker can abuse the weakness to read files on the application server and adjacent network shares, and can trigger HTTP GET requests to arbitrary services. The CVE was published on 2026-04-30 and later modified on 2026-05-17, so defenders should use the published C [truncated]