Vulnerability Description
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The elevated privileges of the database account allow these capabilities to be chained together to execute operating system commands on the server, compromising its confidentiality, integrity, and availability.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-112197?
CVE-2026-112197 is a documented vulnerability. Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without aut...
How severe is CVE-2026-112197?
CVSS scoring is not yet available for CVE-2026-112197. Check NVD for updates.
Is there a patch for CVE-2026-112197?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.