CVE-2026-19721

Full vulnerability record from the local CVENow database.

Description

Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking. This issue affects İmzager: from 2.10.5 before 2.10.7.

Severity

LOW

CVSS score

3.3 (v3.1)

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-04 09:17:42.110000

Last modified

2026-11-04 09:17:42.110000

View original CVE JSON

{
  "id": "CVE-2026-19721",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-04T09:17:42.110",
  "lastModified": "2026-11-04T09:17:42.110",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking.\n\nThis issue affects İmzager: from 2.10.5 before 2.10.7."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "TÜBİTAK BİLGEM Software Technologies Research Institute",
          "product": "İmzager",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.10.5",
              "lessThan": "2.10.7",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1456",
      "source": "[email protected]"
    }
  ]
}