CVE-2026-112198High· 8.3▾ TwilightXML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide a manipulated XML file to read local files accessible to the application process. If the application runs with elevated privileges, sensitive system files could be exposed.
novigest_desktop_app NoviGest Desktop App prior to version 8.0.0-300Update the NoviGest Desktop App to version 8.0.0-300, in which the vendor confirms that the vulnerability has been fixed. For CVE-2026-112198, XML processing uses an XMLStreamReader with DTDs and external entities disabled. Schema validation employs secure processing and blocks access to external DTDs and schemas.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112197Critical· 9.4Missing Authentication for Critical Function in Tactis' NoviGest Desktop App
CVE-2025-10816High· 7.3A security flaw has been discovered in Jinher OA 2.0
CVE-2025-11341High· 7.3A security flaw has been discovered in Jinher OA up to 2.0
CVE-2025-11035Medium· 6.3A vulnerability was determined in Jinher OA 2.0
CVE-2025-11140High· 7.3A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0
CVE-2022-37911Low· 3.8Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS