Tactis has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.9 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.9
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Tactis vulnerabilities
CVEs affecting Tactis, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-112197Critical· 9.4Missing Authentication for Critical Function in Tactis' NoviGest Desktop App
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credent…
▾ MidnightTactis · NoviGest Desktop AppEPSS 0.38%via CVEORG
CVE-2026-112198High· 8.3Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution…
▾ TwilightTactis · NoviGest Desktop AppEPSS 0.16%via CVEORG