CVE-2026-112198
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 28, 2026
Vendor
unknown
Description
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide a manipulated XML file to read local files accessible to the application process. If the application runs with elevated privileges, sensitive system files could be exposed.