Tactis vulnerabilities (CVE)

CVE records published for Tactis, newest first. Follow to get an email when a new one appears.

2 results

8.3High

CVE-2026-112198 14 days ago

Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App

Tactis NoviGest Desktop App

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with acc…

9.4Critical

CVE-2026-112197 14 days ago

Missing Authentication for Critical Function in Tactis' NoviGest Desktop App

Tactis NoviGest Desktop App

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbi…