PatchTheCEVCVE-2026-14304: In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20
22
Routine
MEDIUM 5.5UPGRADEUPGRADE
CVE-2026-14304 is a medium-severity flaw (CVSS 5.5) affecting accessibility tools framework, michecker. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulnerability exists. If this vulnerability is exploited, a malicious third party could gain access to local resources or internal network resources via computer running applications that use Eclipse ACTF, includi
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 87%) |
| CISA exploited list | No |
| Weakness | CWE-611 |
| Published | 2026-08-05 |
| Last modified | 2026-10-23 |
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
eclipse accessibility tools framework UPGRADE
Affected: >= 0.5.0 and <= 1.6.0
Fixed in: newer than 1.6.0
Safe to downgrade to: a release before 0.5.0
1. Check installed version
apt-cache policy accessibility-tools-framework || rpm -q accessibility-tools-framework || accessibility-tools-framework --version
2. UPGRADE to newer than 1.6.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade accessibility-tools-framework
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade accessibility-tools-framework
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 0.5.0 (Debian / Ubuntu)
apt-cache madison accessibility-tools-framework
sudo apt install accessibility-tools-framework=<VERSION_BEFORE_0.5.0>
sudo apt-mark hold accessibility-tools-framework
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list accessibility-tools-framework
sudo dnf downgrade accessibility-tools-framework-<VERSION_BEFORE_0.5.0>
sudo dnf versionlock add accessibility-tools-framework
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
soumu michecker UPGRADE
Affected: < 3.2.0
Fixed in: 3.2.0
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy michecker || rpm -q michecker || michecker --version
2. UPGRADE to 3.2.0 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade michecker
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade michecker
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.