Vulnerability Description
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide a manipulated XML file to read local files accessible to the application process. If the application runs with elevated privileges, sensitive system files could be exposed.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-112198?
CVE-2026-112198 is a documented vulnerability. XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly...
How severe is CVE-2026-112198?
CVSS scoring is not yet available for CVE-2026-112198. Check NVD for updates.
Is there a patch for CVE-2026-112198?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.