CVE-2026-112198 - Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App
CVE ID :CVE-2026-112198 Published : Oct. 28, 2026, 11:17 a.m. | 1 hour, 7 minutes ago Description :XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without...