CVE-2026-112198

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

CVE-2026-112198 Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

EUVD-2026-111993

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

CVE-2026-112198

The NoviGest Desktop App by Tactis contains an XML External Entity (XXE) injection vulnerability within its SAFT import feature . The root cause is that the application utilizes a JAXB Unmarshaller to process user-controlled XML files without properly disabling external entity resolution. An atta...

PT-2026-128067

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...