Domino 14.0 Fix Pack 4 Interim Fix 1 is now available.
Fixed an issue where HCL Domino is affected by an XML External Entity (XXE) vulnerability in Apache Tika (CVE-2025-54988). See KB0124164
Source: HCL Support

HCL Domino, Notes, Traveler, Verse, Sametime, Nomad blog ….. and others
Domino 14.0 Fix Pack 4 Interim Fix 1 is now available.
Fixed an issue where HCL Domino is affected by an XML External Entity (XXE) vulnerability in Apache Tika (CVE-2025-54988). See KB0124164
Source: HCL Support