CVEs published by Computer Emergency Response Team of the Republic of Turkey

CVEs published by Computer Emergency Response Team of the Republic of Turkey (CVE Numbering Authority). 32 tracked.

• CVE-2026-17561 CRITICAL 9.8 Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunication
• CVE-2026-14175 CRITICAL 9.8 Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy In
• CVE-2026-14804 CRITICAL 9.1 Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc
• CVE-2026-15721 CRITICAL 9.8 Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc
• CVE-2026-17070 HIGH 8.8 Missing Authorization vulnerability in HAVELSAN Inc
• CVE-2026-18650 HIGH 8.8 Missing Authorization vulnerability in HAVELSAN Inc
• CVE-2026-14838 HIGH 7.4 Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consult
• CVE-2026-14194 MEDIUM 6.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software
• CVE-2026-14202 MEDIUM 5.3 Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc
• CVE-2026-14465 MEDIUM 6.5 Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc
• CVE-2026-18806 HIGH 7.1 External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute
• CVE-2026-14192 MEDIUM 5.4 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin So
• CVE-2026-14219 MEDIUM 5.4 URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultanc
• CVE-2026-2346 CRITICAL 9.8 Authorization bypass through User-Controlled key vulnerability in Menulux Software Inc
• CVE-2026-4978 CRITICAL 9.8 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vis
• CVE-2026-12722 HIGH 8.2 Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Manageme
• CVE-2026-5219 HIGH 8.3 Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd
• CVE-2026-5134 CRITICAL 9.8 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Sof
• CVE-2026-18642 HIGH 7.8 Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta
• CVE-2026-8166 MEDIUM 5.4 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Sof
• CVE-2026-16027 MEDIUM 5.4 Server-Side request forgery (SSRF) vulnerability in Revenue Administration Türkiye's E-Signature allows Server
• CVE-2026-18915 MEDIUM 5.0 Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologie
• CVE-2026-15599 LOW 3.3 Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-jo
• CVE-2026-13206 CRITICAL 9.8 Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zy
• CVE-2026-12984 HIGH 8.2 Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitiv
• CVE-2026-6374 HIGH 7.3 Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within a
• CVE-2026-6373 MEDIUM 6.5 Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH
• CVE-2026-16999 MEDIUM 6.3 Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Edito
• CVE-2026-15585 HIGH 7.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software
• CVE-2026-16309 MEDIUM 5.3 Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allo
• CVE-2026-19447 MEDIUM 5.4 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbi
• CVE-2026-5224 MEDIUM 5.7 Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Indust

← Back to latest CVEs