Tactis vulnerabilities
We track 2 vulnerabilities in Tactis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Tactis vulnerabilities
- 8.3 High severity
NoviGest Desktop App: Improper Restriction of XML External Entity Reference
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with acce
- 9.4 Critical severity
NoviGest Desktop App: Missing Authentication for Critical Functionality
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbit