{
  "schemaVersion": 1,
  "site": "https://cveboard.org",
  "generatedAt": "2026-10-28T13:33:04.503Z",
  "lastRun": "2026-10-28T13:31:45.498Z",
  "liveDays": 14,
  "filters": {
    "kind": null,
    "exploited": false,
    "severity": null,
    "ecosystems": [],
    "tag": "tactis"
  },
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "incidents": [
    {
      "id": "cve-2026-112197",
      "url": "https://cveboard.org/i/cve-2026-112197",
      "urlPt": "https://cveboard.org/pt/i/cve-2026-112197",
      "json": "https://cveboard.org/i/cve-2026-112197.json",
      "kind": "vuln",
      "live": true,
      "knownExploited": false,
      "severity": "critical",
      "title": "Tactis NoviGest Desktop App",
      "summary": "Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL.",
      "titlePt": "Tactis NoviGest Desktop App",
      "summaryPt": "Vulnerabilidade devido à falta de autenticação em funções críticas do serviço Java RMI do aplicativo desktop NoviGest. Um atacante com acesso à rede ao serviço pode invocar métodos remotos sem autenticação, obter credenciais sensíveis e executar consultas SQL arbitrárias no PostgreSQL.",
      "affected": [
        {
          "vendor": "Tactis",
          "product": "NoviGest Desktop App",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "NoviGest Desktop App prior to version 8.0.0-300",
              "status": "affected",
              "lessThan": null,
              "lessThanOrEqual": null
            }
          ],
          "omitted": 0,
          "fixed": []
        }
      ],
      "omitted": 0,
      "references": [],
      "cwes": [
        {
          "id": "CWE-306",
          "name": "Missing authentication for critical function"
        }
      ],
      "ssvc": null,
      "fix": "none",
      "tags": [
        "tactis"
      ],
      "description": "Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The elevated privileges of the database account allow these capabilities to be chained together to execute operating system commands on the server, compromising its confidentiality, integrity, and availability.",
      "descriptionFrom": "cve",
      "descriptionAt": null,
      "summaryFrom": "cve",
      "cves": [
        "CVE-2026-112197"
      ],
      "ghsa": null,
      "cvss": {
        "score": 9.4,
        "version": "4.0",
        "by": "INCIBE"
      },
      "epss": null,
      "packages": [],
      "vendor": "Tactis",
      "product": "NoviGest Desktop App",
      "kev": null,
      "breach": null,
      "retracted": false,
      "sources": [
        {
          "label": "cve.now",
          "url": "https://cve.now/CVE-2026-112197"
        }
      ],
      "cveVersion": 1,
      "cvePending": false,
      "publishedAt": "2026-10-28T10:17:12.401Z",
      "updatedAt": "2026-10-28T10:17:12.401Z"
    }
  ],
  "tag": {
    "tag": "tactis",
    "name": "Tactis",
    "kev": null
  }
}