xxe 1 Incident Response Report: XXE Infiltration — XML External Entity Injection, Credential Theft & Web Shell Deployment Mar 22, 2026