Skip to content
OpenAdvisories

Vendor

Tactis

2 known vulnerabilities.

Products

NoviGest Desktop App 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-112198

    Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App

    XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with acc…

    Tactis NoviGest Desktop App