CVE-2026-14304CWE-611xxe

CVE-2026-14304

Medium · published August 5, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists.

If this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, including miChecker.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2026-08-05T15:16Z
Affected products (2)
ProductVersionsFixed in
eclipse/accessibility_tools_framework≥ 0.5.0, ≤ 1.6.0—
soumu/michecker< 3.2.03.2.0
References (4)
https://eclipse.dev/actf/downloads/tools/miChecker/vulnerability.html · [email protected]https://github.com/eclipse-actf/org.eclipse.actf · [email protected]https://gitlab.eclipse.org/security/cve-assignment/-/work_items/151 · [email protected]https://www.soumu.go.jp/info-accessibility-portal/webaccessibility/michecker/ · [email protected]
EPSS history
Timeline
  • 05 AUG 10:40Z
    In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker…
    cvelistv5