Missing Authorization Vulnerability in TÜBİTAK BİLGEM Liderahenk Software
CVE-2026-94249

8.1HIGH

Key Information:

Vendor

Tübi̇tak Bi̇lgem Software Technologies Research Institute

Status
Liderahenk
Vendor
CVE Published:
9 November 2026

What is CVE-2026-94249?

The Liderahenk software by TÜBİTAK BİLGEM is exposed to a missing authorization flaw that could enable privilege abuse. This vulnerability allows unauthorized users to gain elevated access to sensitive functionalities within the application. Users are advised to upgrade to version 2.0.3 or later to mitigate associated risks.

Affected Version(s)

Liderahenk 0 < 2.0.3

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Burak Korkmaz
.