CVE-2026-14304

5.5 MEDIUMpublic exploit available

Published 2026-08-05 · Updated 2026-08-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists. If this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, including miChecker.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses

CWE-611

Vendors

eclipse, soumu

Products

accessibility tools framework, michecker

Public exploit & PoC references

https://github.com/eclipse-actf/org.eclipse.actf[Product]

All references

https://eclipse.dev/actf/downloads/tools/miChecker/vulnerability.html
https://github.com/eclipse-actf/org.eclipse.actf
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/151
https://www.soumu.go.jp/info-accessibility-portal/webaccessibility/michecker/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.