CVE-2026-112198

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

CVE-2026-112198

The NoviGest Desktop App by Tactis contains an XML External Entity (XXE) injection vulnerability within its SAFT import feature . The root cause is that the application utilizes a JAXB Unmarshaller to process user-controlled XML files without properly disabling external entity resolution. An atta...

CVE-2026-112198 Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

EUVD-2026-111993

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

PT-2026-128067

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

CVE-2026-112198: Tactis NoviGest Desktop App: XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

io.hawt.examples:hawtio-example-springboot (>=4.0.0, <=4.2.0), io.hawt.examples:hawtio-example-springboot-log4j2 (>=4.1.0, <=4.2.0) +10 more potentially affected by CVE-2026-85313 via org.apache.camel:camel-jetty-common (>=4.0.0, <=4.18.4)

org.apache.camel:camel-jetty-common MAVEN version =4.0.0, =4.0.0, =4.1.0, =4.7.0, =4.0.0, =4.5.0, =4.5.0, =4.5.0, =4.0.0, =5.0-m1, =5.0-m1, =0.1.9, =0.1.6, =2025.1.0.0 Source cves: CVE-2026-85313 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429386...

Linux Distros Unpatched Vulnerability : CVE-2026-92877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that...

UBUNTU-CVE-2026-92877

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

CVE-2026-92877

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

CVE-2026-92877

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

ai.agentican:agentican-quarkus-otel-store-jpa (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-store-jpa (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +12007 more potentially affected by CVE-2026-92877 via org.glassfish.jaxb:jaxb-core (>=4.0.0-m4, <=4.0.9)

org.glassfish.jaxb:jaxb-core MAVEN version =4.0.0-m4, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-92877 Source advisory: SNYK:JAVA-ORGGLASSFISHJAXB-20883142...

CVE-2026-92877

The JAXB factory methods are vulnerable to XML External Entity (XXE) resolution because they historically relied exclusively on the FEATURE_SECURE_PROCESSING flag. On JAXP implementations where this feature does not sufficiently block external entities, an attacker capable of providing untrusted ...

EUVD-2026-97469

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

CVE-2026-92877

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

CVE-2026-92877

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

CVE-2026-92877

The JAXB factory methods historically relied solely on "FEATURESECUREPROCESSING" to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read loca...

CVE-2026-92877

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

CVE-2026-92877: Improper Restriction of XML External Entity Reference

The JAXB factory methods historically relied solely on FEATURESECUREPROCESSING to prevent XML External Entity XXE resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local...

PT-2026-110611

Name of the Vulnerable Software and Affected Versions JAXB affected versions not specified Description JAXB factory methods relied exclusively on FEATURE SECURE PROCESSING to prevent XML External Entity XXE resolution. In JAXP implementations where this feature is insufficient to block external...