CVE-2026-2339

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-2339
Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.This issue affects Liderahenk: before 3.5.1.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.usom.gov.tr/bildirim/tr-26-0087
Configurations

No configuration.

History

27 Mar 2026, 08:15

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad por ausencia de autenticación para función crítica en TUBITAK BILGEM Software Technologies Research Institute Liderahenk permite la inclusión remota de código, el abuso de privilegios y la inyección de comandos. Este problema afecta a Liderahenk: versiones anteriores a la v3.4.0.
Summary (en) Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.This issue affects Liderahenk: before v3.4.0. (en) Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.This issue affects Liderahenk: before 3.5.1.

10 Mar 2026, 18:18

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-10 18:18

Updated : 2026-04-30 15:51

NVD link : CVE-2026-2339

Mitre link : CVE-2026-2339

CVE.ORG link : CVE-2026-2339

JSON object : View

Products Affected

No product.

CWE
CWE-306

Missing Authentication for Critical Function