CVE-2026-14304

Katalog CVE

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan Improper Restriction of XML External Entity Reference pada eclipse accessibility tools framework, soumu michecker. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists. If this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, including miChecker.

Rincian

Terbit di NVD

5 Agustus 2026

Terakhir diubah

10 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-611: Improper Restriction of XML External Entity Reference

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://eclipse.dev/actf/downloads/tools/miChecker/vulnerability.html advisory vendor
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/151 advisory vendor
• https://github.com/eclipse-actf/org.eclipse.actf product
• https://www.soumu.go.jp/info-accessibility-portal/webaccessibility/michecker/ product