Unrated severityNVD Advisory· Published Aug 5, 2026· Updated Aug 5, 2026

CVE-2026-14304

Description

In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists.

If this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, including miChecker.

Affected products

Eclipse/Accessibility Tools Frameworkllm-create
Range: <=1.6.0
Eclipse/miCheckerllm-create
Range: <=3.1.0

Patches

Vulnerability mechanics

References

eclipse.dev/actf/downloads/tools/miChecker/vulnerability.htmlmitre
gitlab.eclipse.org/security/cve-assignment/-/work_items/151mitre
www.soumu.go.jp/info-accessibility-portal/webaccessibility/michecker/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000