novigest_desktop_app vulnerabilities
CVEs whose affected-version data names the novigest_desktop_app package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112197Critical· 9.4Missing Authentication for Critical Function in Tactis' NoviGest Desktop App
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credent…
▾ MidnightTactis · NoviGest Desktop AppEPSS 0.38%via CVEORG
CVE-2026-112198High· 8.3Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution…
▾ TwilightTactis · NoviGest Desktop AppEPSS 0.16%via CVEORG