CVE-2025-7706CWE-306

Improper Access Control in TUBITAK BILGEM's Liderahenk

Medium · published February 17, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion.

This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-17T13:22Z
EPSS history
Timeline
  • 17 FEB 13:22Z
    Improper Access Control in TUBITAK BILGEM's Liderahenk
    cvelistv5