CVE-2026-2339CWE-306

RCE in TUBITAK BILGEM's Liderahenk

High · published March 10, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privilege Abuse, Command Injection.

This issue affects Liderahenk: before 3.5.1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00824 · 56.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-03-10T12:39Z
EPSS history
Timeline
  • 10 MAR 12:39Z
    RCE in TUBITAK BILGEM's Liderahenk
    cvelistv5