Path Traversal Vulnerability in TÜBİTAK BİLGEM İmzager
CVE-2026-19731

3.3LOW

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
İmzager
Vendor
CVE Published:
4 November 2026

What is CVE-2026-19731?

A path traversal vulnerability in TÜBİTAK BİLGEM's İmzager software allows unauthorized access to restricted directories, potentially leading to unauthorized data exposure. This vulnerability affects İmzager versions 2.10.5 through 2.10.6, enabling attackers to manipulate file paths to access sensitive files beyond the intended directory scopes.

Affected Version(s)

İmzager 2.10.5 < 2.10.7

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mustafa Anıl YILDIRIM
.