CVE-2026-14304: XEE
In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists.
If this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, including miChecker.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Eclipse Accessibility Tools Framework (ACTF)to a version that resolves this vulnerability.Fixed in 1.6.0 - Upgrade
Upgrade
miChecker (ACTF-based)to a version that resolves this vulnerability.Fixed in 3.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14304?
CVE-2026-14304 has a risk score of 47, indicating a moderate level of severity.
How do I fix CVE-2026-14304?
To fix CVE-2026-14304, upgrade to Eclipse Accessibility Tools Framework (ACTF) versions above 1.6.0 and ensure that miChecker is updated to version 3.1.0 or higher.
What software is affected by CVE-2026-14304?
CVE-2026-14304 affects Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 and miChecker versions up to 3.1.0.
What type of vulnerability is CVE-2026-14304?
CVE-2026-14304 is classified as an XML External Entity (XXE) vulnerability.
What could happen if CVE-2026-14304 is exploited?
If exploited, CVE-2026-14304 could allow an attacker to access sensitive files on the server or perform other malicious actions.